MAL-2025-66690 Malicious code in aesthetic-orange-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743a34d92c3b26e08325158a8fb4099c7244542f2f09c7912c14d55fa3436e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69356 Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71500 Malicious code in voluminous-blue-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad91476de6c94c820fd873580c4181ef1c5a36eb37ff2a77c6c20b7576b3765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66638 Malicious code in additional-chocolate-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc01f35118e2ae6500d1a5b8fccf23ab1d4149dc4eba83326d49c2229b73f8c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69046 Malicious code in key-yellow-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67677 Malicious code in defiant-lavender-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d61ab6e2e6315ea624ace1a8228ae93e4e1a6da1bdfb6004ec0f547d8361231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66785 Malicious code in annoyed-green-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf01f40ea9a7fdcf3e7a749d8fff668ef9921171a8c44063fa82db84653bd6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68672 Malicious code in hilarious-fuchsia-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb5a4fea134fbf5fdd74c2192c26cf56e7aba0aabcae7e9b9b2b1b18f5ce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71112 Malicious code in thin-rose-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab01a3d0ac1e583a11caa4f003a308a65807b6569e7e1175cf36e5946a6ab03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67074 Malicious code in brilliant-red-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99bca911f9c10da4efe6ef0feccd31ff9514dc19d2225f3aa1c92dc95ed125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70001 Malicious code in primary-magenta-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e519a452a28cfa7312d520681af8504b83d6866748976e49b8e9dbc1d7fab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68533 Malicious code in glamorous-violet-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ec9cbbfa963557881a44a3ed4dbd9bfab4d16ca20e63494170f7ddf67df7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70779 Malicious code in splendid-indigo-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b7114e116cb7fa93ff32eac3c55e94d83190f3837fea48ba5a55739bc461be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67842 Malicious code in dominant-sapphire-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9190052f273a5f0486d4ecb17715057ead05366df4383d717a38aa6ea91f3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67461 Malicious code in continuous-turquoise-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfcf6ab9828297610f4e013987507c659b5b0e3ecc6c6fc6b17045acc6f0cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69657 Malicious code in numerous-salmon-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebc2051a089470d941675cc098f600f2154f5df6fb9f62e94e006df0791268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70876 Malicious code in strict-brown-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61dd3e308a276e1e2f1aa06aaa8e5dda47941f2df1c81fd01224855ddbb9a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68985 Malicious code in irrelevant-purple-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9094eef05831dacf10c16c8d81ed68167ff9167611d072d0d3580b197a598bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...