MAL-2025-68370 Malicious code in flying-amaranth-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73b2d80540bc5205d211cf4017dd5090358cb30a92ceb4e2c2e269e2df11cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71310 Malicious code in universal-amaranth-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb638c4a6b4b40009a7e0cf6603629fea3fbefd4bc55ad9dcbfa47d2c52cc7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-black-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd1f9c70907a2bae1c05ea4270a4048e5490023234e23911f4705d98583a536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70192 Malicious code in raspy-coffee-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474096b32aa3c1aedeea59447b0e1b3919008eef97e74dfd4815e30e5e594f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69447 Malicious code in moaning-sapphire-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89e87d76e1beddeed28a699d5c5b1e9fc13b906f96f71dc3cb3a42b898718e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69442 Malicious code in mixed-crimson-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d0b9b18d72abeba489dd2f435608f82984eb8f0efda0fcbf3e8732a3afab6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71606 Malicious code in wispy-green-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19975d8f0a4cfe353cce3eb88060e7cb2f5da670f7f632fba225a21187ae8170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71383 Malicious code in useless-turquoise-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4f2f9f8cc7ac3b9160ed208bedb0818a866ca78ca4b22df75a491ae5fb7c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68466 Malicious code in fundamental-fuchsia-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02c4030a41987f0c271889f59f6e6f65fcf6e8f9489dc9bcfc1385a63513f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68817 Malicious code in improved-emerald-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f24ed515830fe22175446bd3c7e7a424cee8f1c1c89efbd750428ee238601f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69030 Malicious code in just-olive-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2b3b7482758c1f0981d8192d5a9472891ef33a3f9d9e9e3e42c6f167eb1755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68483 Malicious code in future-teal-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b326b647334f84af5e3ed88b612469105b442e51e45ca8a5d8f93047851a7506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70901 Malicious code in subjective-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba082f3db73056c1df3726e1625caf2e364664a36bfc2037e15bd81f29dbc6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66973 Malicious code in bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd05784c67e182c17c4bb6a475616f685504c8974efb8ceb0edebd8af264fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66865 Malicious code in associated-purple-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e319095e195b55789255547211e41fcb16217356b00829ea66b83c3cf92894c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69157 Malicious code in likely-teal-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e5430b58463a9bed80d3cdbe82cc8fdf5664ebab0c318de7ce4fabb09d3a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70191 Malicious code in raspy-bronze-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f281a81755f1e596d13663de9ae91e45537855443d02ee67cc91f37a26b1b964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67404 Malicious code in confident-blush-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27b35f0b3943ce9180541fc924746844a9287da9fe10642aed74945016673c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68824 Malicious code in inadequate-harlequin-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2844eacc920d38e438e1b9ab6f51f0f12efd2d74e301bb22b7af98d601d5f3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...