MAL-2025-67789 Malicious code in distant-harlequin-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5f3b65d9d6a6aefcd43092572d27b4f6adcd7c6acc611301b6273a0b4bb898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70868 Malicious code in strange-blush-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b1147e1dbe42e9219f9faa55cea8fb805b76fa0374f263a0fc42610ca5c249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70421 Malicious code in rough-coffee-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb4c2585395e9e780966768f8101ebd3bf6fc829153f9d57557931739a49507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70097 Malicious code in psychological-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b28bff64f07533a7fde60a1abb6e0ad7af52d0d87c21db63daba06ebabfbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70636 Malicious code in simple-violet-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3844741ad185579ea95cbb35a062d22ab4ab32d7baa5e7aa6f2463a144faaf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70114 Malicious code in puzzled-chocolate-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ddcb9303f775978e20d9c4c9d166aea34a201e7c397d54045edef64b0d2bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68537 Malicious code in gleaming-coffee-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b43f4c2b5848d86efa5744cf43311440ef501bf026698105f5a270c5f948a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69516 Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69220 Malicious code in lovely-fuchsia-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6837a60dddca4b89a59a172b5c6875280cfbba7f7268a1f9898a3380d4434407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67616 Malicious code in damp-crimson-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda62674966aea8a64918dc232dd16d6b55b293ba1d9449b3463496237e44cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69203 Malicious code in logical-salmon-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaeb249b01cb478f61481085479b8c66e3267133769da4f068a7945b2aec58f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69511 Malicious code in mute-amethyst-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88248a1b47a2412a421a35bdc44c80f6ee85d36bf38dc14f51c3b737f9d3a85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71693 Malicious code in yammering-azure-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77be9ffc60626dbce6c46e8da868e991367087ea53ceaa2cbdc0623db3a784d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71060 Malicious code in technical-tomato-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2728d7d6fd73cada4be0e42aa3623f21d9f8b39cd25fee3a39719cf29bd61a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66983 Malicious code in blank-black-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ded53f3d08be208e7079dc12e344a53231b46672ec35d5c80c584e8ef1c484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68040 Malicious code in energetic-beige-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31927015f010eacac0dd53063ba10ac2f00ebb612de3b9d5d9d766719db37bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70238 Malicious code in reduced-olive-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35530e799c0a200dbfeab8034ae018325b1e72364f641c7cd1e91c1cdc41df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71787 Malicious code in zonal-blush-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5f64167bee9a32d3fff70092b8f5587f68709f03d1ef6a4eace69e31d706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...