MAL-2025-69440 Malicious code in misty-sapphire-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684df63822d4f0415e2189bb1898899590db165fc99f4ffd8574f57e8774d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70278 Malicious code in relaxed-amaranth-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16883d0aff72d352c9086fe2111e7a7a9ad6d17b93d3d70f1902e6bc31cc6237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68451 Malicious code in fun-magenta-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d487f4d39c0ca4cae54cbcd87c29397feff35a0b21f4a8564ac8399aa4a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68183 Malicious code in explicit-rose-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6ca6f47d6b9e5fd2bc4373752acfe912cf417311c5697b71dd5f4dfbd04a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70526 Malicious code in senior-blue-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db2a55e0b9720e975f0e8d363ce90f686e5c6926b2651fe4819d11a041e22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71047 Malicious code in tasteless-purple-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821a55c7da4d01c23cd7d6433604b7609fcb95183146bb7436d369528e09e276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66992 Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66626 Malicious code in actual-turquoise-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f7fd5c7a9c8957e78981db043ec117156242e6a94a55e1e6490b9cc22ea93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66651 Malicious code in adequate-yellow-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5692b9d0da96cccac6e5e8914ca293d8a24d32db6f074305ce7f0b9de30bb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71579 Malicious code in widespread-fuchsia-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22587d909dd7eed54f60f84bfcd5b1ab262cc2a0607cd4db261497456e76ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67441 Malicious code in continental-chocolate-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5166ff4f10ff0a7772be6df0efeb465639cf3b2db9ca30fb27af69cef7ae4621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71318 Malicious code in unknown-coffee-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080e2572a8feba244ecf632934ee45b0e8cce29cd999eab4cc99a14748074874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-red-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f82afeb6e2178b1d8dcca8b466e73e283cd961b2b0cc68141ce455faa08b2cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-copper-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc90295e15c2e4d3f98a61b9dc653e69144ac40161a050c9774e990a2edf18d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-scarlet-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f579405582de98dedff841b6645080181a2c9a4cc838b12c9401f937f45c2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen-amethyst-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e93c259828c218b61f82db885de7674068fec1232ca5e57820193809dff04c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...