MAL-2025-68789 Malicious code in immediate-yellow-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcfefa0fb7afe7d5b652ae479ed581578b699a6b095df265455831bb444d099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66791 Malicious code in annual-aqua-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b85c9d497b8d6ccea223bccd2a402de540a6cc8c9ed3784b0293b5d817aaeb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70740 Malicious code in spare-white-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06917ed4c161ff8e5709c9225f92fd1d3837cba7985bc5cc23a274c2a0e6858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68034 Malicious code in encouraging-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9861a19f3795151004d24a4c2a30f26a1788d7634dbb432f744c00dd5b839150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70770 Malicious code in spiritual-amber-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93d46a712db780ffbbbf3a7557bc077e681f4c01fae4ed40431cf95f3bb9788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68737 Malicious code in hungry-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568ad991a1aa8eb68da6a2553c8bc9ad0215e373aa4f9e30e3f9c07ea3624f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70923 Malicious code in successful-amaranth-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302f5637ca31426581ca9f9346e52700b193881e62f96e7b07c5db81e19d2eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71361 Malicious code in urban-pink-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b8e122aa57577d4920fab918b68243b1f825e109db62b540cb2b9f1f82960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68540 Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71065 Malicious code in technological-lavender-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1666ca9c6f38ce533b9cb5b0eb4646770d7d2bb5718a064c2f56307bbe5a3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67595 Malicious code in current-turquoise-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abd294580728bc27f22bfecd746b1a40d3461cf7057240dd0dc4759430b13ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68761 Malicious code in icy-sapphire-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520c16d509ead9a0619d9e283784fbac12ef4695534aa88e252a532a95945429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71497 Malicious code in voiceless-beige-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d271aaab1f2c710ebe4ab5063401bb9e0db552d40ba4965cee3a5db0311c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-white-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8c84ce7a15710a2cfd9b031b08516717d86dfe79ec5a86f366a7be41b277a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69089 Malicious code in left-olive-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5865135ca0c1d3ee6766c425aefd34e4f06012bb5ee8a71570b51a847066c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66562 Malicious code in @bipyruss/luminouslab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18a63a96569554dd1d59d538be2efef522ceac3c83f85bbf79a6befb6d16169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68912 Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70139 Malicious code in quickest-silver-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c585e538187ea0fef65963f6a2af96cdba88b14168c3e07c36f49fc5d5f86d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...