MAL-2025-67890 Malicious code in due-amaranth-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7523ecdb53a060bcde3e9f3b05b4456e7cf861a6597c26e6c348b345d777da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67810 Malicious code in disturbed-red-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511676de670af02e6d0cb2f467ff620ed019c9bf4023defc8a727341958c6fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67290 Malicious code in colossal-blue-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba283d6d87d931e7bd5188f8511c52182824eb285244ec3fa84c488d1fb7742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68426 Malicious code in frequent-silver-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93ef2718c0fa1b09d17ed16d099a078ac84a4d7abc9ee57f5bc193ca59084a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67938 Malicious code in economic-teal-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b297d94c842fc2e97ed3e4b38222ec988b622520bb713d2af558e8c90d792d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69385 Malicious code in mighty-brown-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c86d9dbeb4f70c0668bf3a688d2a42bbb5e4f0f9169fd9861a243c77c4b12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67345 Malicious code in compact-tan-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb1318ab14f4cc4798fc18728a5a460623690b36a34a54f02571af3c938f06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69208 Malicious code in long-indigo-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b35e5cc021d783d3cb4f381408da3792646ffab818335bff0a77195a8e47a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69053 Malicious code in kind-violet-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d45a9299357bf0f1a96592a661285dbdba348517df5d9dee4e723a316ca17a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68688 Malicious code in holy-amber-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0396528c165e73477a65a3d3d8f3ef3643c196b3a25a879e90247bd57a9f3953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71262 Malicious code in unemployed-gold-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5007da35138647293321e9ceb2a2d6cbb1d16680d119b4e0248d2f4bb21b0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67815 Malicious code in disturbing-salmon-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafe10c77c92190ffe63acea7168cff2f75528fc24c66651d43ce5187e8314ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68939 Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70699 Malicious code in smooth-coffee-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97818a6ce079959b9e5dd4b5f4236441c26c671bb5ec0ec26d8f541e2e8e83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69582 Malicious code in necessary-apricot-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3816f6efa6cfd5a3a9a9047b31e86825b22b3d3439b2cfbe7e5261e6af2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70717 Malicious code in sophisticated-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6db623950849062504176fd2565c8a084550ca53e773189c1bd444fa7fe088d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68662 Malicious code in helpless-aqua-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc71ecd3da6cb2f579c17345e18d6561a93e4d762b9494f5bccca8ea0fb08893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27d46ca3177cccbe591878f31fe3c364af698a20a8dc42dfb933dfd30405f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ffec13a2a5e1b78d05b89f5ac3da1731a83cd3a6cba3be626a6c5728d4a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...