MAL-2025-67293 Malicious code in colossal-ivory-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fae44db78e390ad7267012097440e4f536fa960da2ed175d1459a123a405eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69280 Malicious code in mammoth-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173d922fc27344c632c1a729f1edca13ce22d434693c1a30beffa8b87dc92eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68836 Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67871 Malicious code in driving-gray-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb8f3e9dde279ed1814194c255e502c0c544950650136e069b73057febd217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70844 Malicious code in steep-jade-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4731a524c738a8be44754de23ab56cf3e1be0c6e72c343b0580eecc01146a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71262 Malicious code in unemployed-gold-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5007da35138647293321e9ceb2a2d6cbb1d16680d119b4e0248d2f4bb21b0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70578 Malicious code in sharp-blue-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e491289e9e993777324d98d6e54f16641c3a614a43121e78fe653bc686f71f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68198 Malicious code in extreme-blush-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683098a728f81d88616d253833518076ca39d2482f84fff32d02f8f677e2eab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69697 Malicious code in odd-purple-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9576687b775650353a733f0c4e8d0e5b605fff5da0450ce790d771926906a0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68170 Malicious code in expensive-emerald-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885749b07e3888201cc3d4ead094deea2ba23239363414ee44eed76ed7301d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70003 Malicious code in primary-tomato-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ad301515d71c97966044c99ea1916b676da61613831075606b740c593ea50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69236 Malicious code in lucky-black-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532570fb0d23cea508a45df7704433797f39fac8ea624d4215b54c66e40bc02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71679 Malicious code in xenophobic-purple-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece29cfe9a6effd409d6c94fed03cc1a96b85ef5952eccc192f87b574e4d004a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68773 Malicious code in ideological-scarlet-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6370338c97a99e7f714140199817ed60f30bbbe5b246c01f69085eddfa152ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71283 Malicious code in unfortunate-scarlet-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f20596d45414ef48f948e1302eb75f642b51e1c0edbd4ec0e26791d0917345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71047 Malicious code in tasteless-purple-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821a55c7da4d01c23cd7d6433604b7609fcb95183146bb7436d369528e09e276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71362 Malicious code in urgent-chocolate-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a273c1c6234d0751960f86af38d225fadd99c98eaf03168a847fe6e2258a5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...