MAL-2025-70332 Malicious code in representative-tomato-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1431ff863a634e38a9ae59402cd50dc17e59c950c7af1153079e2a0cfcb5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68907 Malicious code in innovative-indigo-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7549d6f57be0f96e1987528f20a5124998f4a4653f8bbbe946ed284d22be4a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy-magenta-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba193a368057a545eb832f707d6ac91355d50f84b8ef33bfb83c27f5881bab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69804 Malicious code in painful-ivory-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6816ec14bac99c4e69dfaa028f665a59bab11c3545be6d0d45b4a11637d16b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67635 Malicious code in deafening-peach-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1c02855daf0fabcc7f51e418dae1d10126ea0f769b3687dabaa3dce9376c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66966 Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68910 Malicious code in inquisitive-coral-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91be5abd2cf841a896ec9f58b209ebc1c89202982c109684f33963f2579e70fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70796 Malicious code in spotless-indigo-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b1017b8efb49df9a8fd6489cb4a37cc8b15873a3b936cd93bc4efbdea7b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71577 Malicious code in widespread-black-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b386f3cbb2457e9189caf4c3dcca6061f858030939b2287835ff9bcc31ff6dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68893 Malicious code in initial-beige-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58044d381c1d0493d05ed67b8f291bd04bd3373df00463459d6a6678e1802a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68011 Malicious code in embarrassed-yellow-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ff0fa496bf27bc99cfec9ea3aa1c8b49f3f56eccbdf553f56c7856ee5a7602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71117 Malicious code in thornypric (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971747ff4396df72c7620410bfc1f52e5b8c7bc382d9f284560d4756bb6e8124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70115 Malicious code in puzzled-gray-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcf01df41e17086338f54a32182be4cedf919c700c412e4c919fca660d2a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67275 Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71772 Malicious code in zeroth-pink-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f86afaa6f6bb8a17c8893beb0f3f93ee604dbe9dfec6dab22673c6cc822be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71018 Malicious code in symbolic-apricot-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c78f08ccb9e0fc0cfff8c2e0e45aec8298abdf42c1e9e605aad30f99ad9270a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67455 Malicious code in continuing-magenta-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e07a1fa61a98a2d279c6bad2c13da7975120e82dc525fefaf790e83f1d0fb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68784 Malicious code in imaginative-amaranth-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a36d7edb58ac56f66757a3877ae68e06557fffa424bddde76ff9e542fab265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...