MAL-2025-67268 Malicious code in cold-olive-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a56c7d9be074af501d4c88ba87b8495cdbf0cdcf78a2a2d7eb49d6c031cad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70269 Malicious code in related-jade-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473bfec02d7b6faefddb11bc30ef2f44960b13a6c80c292142c3fea9dcb025bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70555 Malicious code in shaggy-gold-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c27fd20786e557024a8e871bad40f601a40e7c6c09ac823efe36308295988d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68075 Malicious code in eros4758 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adae64e3cbe9b02caa9f9b03d3687bb2c76da83faa1cdc72dff854e99c6e8c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68865 Malicious code in indirect-yellow-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63fa815acb544e56de6adffe85354d40b099da10d5e638fc3ecc069be6cf0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69285 Malicious code in managerial-lavender-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986f8b6c8506c2fc236693692dda2c174e3699a78c66c07d2ffcd99f6bd010ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66913 Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69960 Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71216 Malicious code in ultimate-ivory-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a99de23f38d879cbdb1345314d0e5457ecd20b701da8d8671a642285c8d978d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71440 Malicious code in very-salmon-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f978513608076b5481806fe9bcc24bfb5188f4c10dba9b44c175805234f1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67089 Malicious code in bumpy-orange-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4ecb1da48175d3be0dcb4391fe19e75a11b55818129a0cfdd41ec738ffd9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66559 Malicious code in @bipyruss/ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a5b3466a9a0966cbec8fea3a3c30a21f29edeb9b0c51f8e727affe28a1106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69826 Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69477 Malicious code in monthly-emerald-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd842fe6b3fd1216a8a16c2f1a4c1b37a51d3fdb841ad93928b4f4c73372c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71652 Malicious code in written-sapphire-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851f0018689a0b45b91d876b8973f078fdb87084a370d99c36d8a906465f906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66835 Malicious code in armed-copper-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3af900662ab8b2fb082fb4f7eb88662f90e80868c3be089ca49203360ac4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...