MAL-2025-67490 Malicious code in cooperative-brown-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85ba6dfe1b77e54e75514ee4d12c5f09080c9cac4c7f91ea33f76be9fa3e7f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69743 Malicious code in ordinary-lavender-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e09424abace5480ba4d3029d00796a291efddff1cf2a2d0959ae57947ac731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71099 Malicious code in theorhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15d11789092dac8ac08e646da260e8fef749f90da1e550d356cc8709d0d6766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67237 Malicious code in closed-lavender-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040259d2266083ef8f612142809c654dadc2265d20e7bac358c6c6ff9b952264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69150 Malicious code in like-turquoise-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f72bd07a2a3703e929bb5e0f2822aea7b4dfb6b5560ba9a760ffb0863095a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68656 Malicious code in helpful-apricot-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd4230a655c8c9f685015ce4ff82e5f5a4a4b4a098aa15837d3d34f23aee0039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68984 Malicious code in irrelevant-plum-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b46b6c9f07a915d1908cb0462ace9edcb6d55dec50eb1ec23e7affc2827a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71621 Malicious code in wooden-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8447e5e3c56fca9d4f014b4556d4f9d12c77f22038738044de77fc3ce1e23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68544 Malicious code in global-harlequin-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fe6a7743feeb13dfdc8001ce18599bd9fe27237be4b904d0ddaaaae130dbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69913 Malicious code in poised-black-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cea2af0479f03858062e4e9a7d55003710e044c27fa8cfea2406827f898d892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69392 Malicious code in mild-blue-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65410d24d64d7a7f7f83409dfecc7a3a17dea1b492fb699fb925d933056bbea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66771 Malicious code in amused-black-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d2d535eee46bade5c911531bb50fbdf5f05474bba87634b41af4bd2c8bd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68113 Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68273 Malicious code in fatal-black-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b514e02372fd39eff6ef5456f94ad540fe95ea26a567f64da1c547b09c7e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68996 Malicious code in itchy-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d1a7d1262342785e60ad468998bdd2775130836041d7a73f933a6226c1ec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69864 Malicious code in perfect-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416d23f324b0978398afe760b31f554fcd5bdb60a1a3e19cfbee364c83e3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...