MAL-2025-69856 Malicious code in peculiar-amber-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0c652dd015072847a6a59bc198a8aab719d51a8020d8a47eabfcd416dc155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67737 Malicious code in desperate-red-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c886a564a2e7190cbca7540a26ddd8f65bfa0e9e43c7b6a493b24ce1c309ce0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71189 Malicious code in tricky-indigo-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b8812da6a188663d41a20f2d5c9fab6dda39dfa2bcffc6a9a6898912731d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66567 Malicious code in @bipyruss/vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabea9f0d2062dd16b78433800d3c5c4f91e4569aa1947f2a6d042e1868d59df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69314 Malicious code in marvellous-blue-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0689dfbf8f9fab7e7d3efda817e3ab3c6e899b9630bfc64e57b39318404c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70646 Malicious code in skilled-salmon-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efed3ef41e7368cd9be586b6547edc9e2eb60c829a38c47c6e083f9d42105f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69607 Malicious code in neutral-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ca77a935fbdb3767b79809f0b90c3813cb88c603b516649afeb7e9a430a840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67315 Malicious code in comfortable-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9da6a1c8a9886576dd0b51e6b4d03e8508d1a035ac896cfc7e2d7f1a71bef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69741 Malicious code in oral-violet-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7702b9c890b216faee7ded7a3a49c4435b00264865d5a045cf206468c57b11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69246 Malicious code in mad-emerald-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0205f709eb05026eef5b30ea9330dafc4b92e5ee1b45f95368adcde2be3083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69608 Malicious code in neutral-copper-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae984325af59cf81691c20859921d7e6afa13dd79c73f625647d9458672db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68917 Malicious code in institutional-scarlet-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac77cedc35a9940452a25f759cd72bebab74678fef798ab054f93882fcf0f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69034 Malicious code in keanasti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d640ce8dfbb5452b0680f769221796872d66e6fa0516af040cde2d3e4fbc9b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71748 Malicious code in yrinth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916810ec607c2451550d2bf989707b350a214f523dd4b37b8eba7b2762f9543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70121 Malicious code in quaint-ivory-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c857ff513286c048d80601e29edc3eae027494466bbac98536c4853f4d21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68254 Malicious code in fashionable-crimson-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f80d1944e228962f4693bd798c0ec63715c89d73cc52e8429c25e7ad4f040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70556 Malicious code in shaggy-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa7b27a00a1344a0a424769c84d83cb6c947b38fb643d8deb0aea0914244f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68280 Malicious code in favourable-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636daf04a8d75058a259dcd4f7dec0052e9fcb4bb953a1ae67d35b49c3dec8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67423 Malicious code in conservation-sapphire-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029f5f2a2b16036b941508aad51a060b818e658ea990e81b509fc68cb400de0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy-silver-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5957d7fe842d3c0f6d90de1421e27e4a82e4b0cd3161a092c13c827f9fa180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...