MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66951 Malicious code in better-indigo-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ed962f3898638ab74564f5ff661abfa65e24ae5455a72efb9fc1d0387350b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69260 Malicious code in main-fuchsia-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b3394a7972fa6f001e533ee6ed1a22f9a8719f5fa46028be013568e4a33de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68089 Malicious code in estimated-turquoise-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b96ac3a8fb643a14c82c101f5a99835eb95dea2cd2a8468482eda1d7f54848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66654 Malicious code in adjacent-peach-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e53a2421669459459b4c9e9d6c2d5a1ecca93a2aaea6ca6df3cfe736931c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69120 Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67494 Malicious code in corporate-amaranth-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465eeee80793f7325ec5913c296f4f8ae2630e60fe4598350b961d9844e79fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70997 Malicious code in surrounding-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f50e6ab0fb53662f4acfde859c15c63d52942230aaf07124a28d5deee928d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70558 Malicious code in shaky-azure-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a918f66bcceb1101ed929cdd296abace3fe35b97e4b5829265d61318226936a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69531 Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66617 Malicious code in accurate-coral-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f003da51859b7c3c0631d8d03aa5e065dbfa0d24dba54bc333897506df5ea926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70669 Malicious code in slim-turquoise-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ee23f39befc0cdc4eb8d013e10460c3c167bbdedbbd467667c24b6da335ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67539 Malicious code in criminal-aqua-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab92c0dcc660a4397b309589c23fcdac382eaf542741973537e39a51e9f05b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68326 Malicious code in financial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a320351588676a7c196e008492aa20f3bfbd720dde9f24cf7e926272181cb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70938 Malicious code in sudden-tomato-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe8f40d5f2624bf92a3ecd8752e0a9f1a4e84f81261b88e7ccc4bda4647c4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71190 Malicious code in tricky-purple-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ed620c53c6e65ade0eb4e67460336127245310ef7b5808b09ffdb77a50e7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68181 Malicious code in experimental-tomato-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5b06d8dcff378015c73659cb952f6dea397f45f610c13eb7926022af864a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70783 Malicious code in splendid-turquoise-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34336e1108c9712698d0ab35343583f522678858db27ff6992ab9a346459ed3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68502 Malicious code in gay-pink-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb2f646e8f9b3310aa3c575d03016bef4c8abd26469fe4134bcf0692ba1dfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69514 Malicious code in mutual-cyan-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776b1c7d97145417bbae9078e4d927cc7396d294a2d2748cb918c1535863f2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...