MAL-2025-69173 Malicious code in liquid-amber-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b099d18035ca7fad7bf1e455b43b1003b9492074903171c2b9f9f6419d93fc94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67791 Malicious code in distinct-moccasin-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6c96a1f68885ad20ece30f2e8f676cd5012a6aa9dab83cfc5d1496672a6602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71211 Malicious code in ugly-fuchsia-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aef1df003ec4fc2ffb0c9b61c6032f27a58e03dca395481210453e93309853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70144 Malicious code in quietqx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd3d3388386f6abe2deb41e54df9270f8290a6eccd747a368027b7e9d7b6cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70509 Malicious code in selected-amethyst-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181f6196bb78d8a6d9fde6ded1aea999ec33449d3431a8dda0c3a4a7d4afac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69626 Malicious code in noisy-rose-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468d6660cdf8ba3c3e44faeefd0221c45ac5d3ced050259728ffdc6e641f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69336 Malicious code in meaningful-amethyst-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b06eee48f2faaaaabef35eed69b34ac8deaf6398fa8cfaf1389fcf9057156e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67279 Malicious code in colonial-fuchsia-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662a0a8c9007c727438c85e0fe7387b7819bd11b13cc7c3c27ad68cc1382d4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70782 Malicious code in splendid-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f40430912fe11a055517b10085d1bb2c1f62fe9c2fd64635fd66a51628569f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66877 Malicious code in automatic-crimson-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ea5acc78d34d5ec7e1fe7173639a43079af5ad14ee6f34393648c88c4b4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68239 Malicious code in famous-red-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e57fa9524cf68719194faefe80b5c71152abf743c7b2c28a8b26ff6e4c188e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71716 Malicious code in yeasty-jade-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211d83fc83360d9341bde831222de9ecc51178a375a49cfac5d22d7702afaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68010 Malicious code in embarrassed-scarlet-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a606a6fb02abe788e76490871ad66c6291b14b64a8bac28190b546725fa9f4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66744 Malicious code in allied-moccasin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37e35c7eefee0d4b16c8347a56765021498806a24172680838e810f29f8c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69757 Malicious code in original-gold-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69390 Malicious code in mighty-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ee152906583f5c46877e21118ab2a3a0dbe1bcaf7166ffde17eafe64ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69945 Malicious code in possible-olive-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac10842dafaac29c25240868e9f716fbc18a8e4e8dd28f8ab52982d5363227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68856 Malicious code in increasing-scarlet-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b3738d2bd0684aff7720ce225cda9158168767c1dd93b325f9037d4426b8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69557 Malicious code in naughty-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081f50c8f9f1529a81c2392169bbf4c9dd70dc82eebbdabeb3b11fa61371295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...