MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67544 Malicious code in critical-blush-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c6548cbc44347102c96058b1f1e8f44b997c1fb933cfa099da75e203569d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70098 Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68747 Malicious code in husky-amber-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee778e0094849ecf436e77a3a0cba47567a6095deb143986506a7591f7b835f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71095 Malicious code in theoretical-ivory-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599224aadd0a6283bd4798ebbaa9185df72af0a0d51f4815c25e22bb4c38549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67998 Malicious code in elflyyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be746b466eb6d32074ad4c024b8883f382a57599cf0b1d8406d2f379526bc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67067 Malicious code in bright-cyan-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e624eb7541389ca5048b028459307b1e998c0bdcc290fda59e290b5083c63662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68265 Malicious code in fast-sapphire-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15afb2b26b47bc21221d9a950aad20c10461ec796cf8b6e7ae7633ba452d3237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71122 Malicious code in thorough-sapphire-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100afd0a6c7b2174b674b1379cc1e9d95d18088d20eec9eb512a8513d2b9b075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68182 Malicious code in explicit-lavender-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f04bf2886cca834220e14b0e33d15dd723cc3f8155629f7546dd2056f7b5734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67219 Malicious code in clear-crimson-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57d5836e71984395d838b1da38fb7d3df74ce16584ef7769b10537ec0000f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71442 Malicious code in vicarious-chocolate-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a833bead0cc4cf135bf30e46c2d0a69c42d2cce9203d138a1abc50fd9471b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70813 Malicious code in stable-ivory-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60253aac18ccbf3661be492403f29ae2eeec8b924f277d61cb33e11dc26b5a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66973 Malicious code in bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd05784c67e182c17c4bb6a475616f685504c8974efb8ceb0edebd8af264fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71476 Malicious code in vitreous-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564a5f5b31ee732008963b6f231852436b5ab720412d97b636396f481f2b1853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...