MAL-2025-69442 Malicious code in mixed-crimson-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d0b9b18d72abeba489dd2f435608f82984eb8f0efda0fcbf3e8732a3afab6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71716 Malicious code in yeasty-jade-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211d83fc83360d9341bde831222de9ecc51178a375a49cfac5d22d7702afaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71276 Malicious code in unfair-orange-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946c9f03cf05416d7b26062ff3cf16766e095fcebf7ac9d4a2649e74ea52441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70412 Malicious code in romantic-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35317c42a641793ae48bffcf4a0c0758d3b57d63a496ccf56ebb2fce28200184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68091 Malicious code in ethical-cyan-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942e43edf6c19fa621c8dab170c464920cf42f634be0d22a1339327174535f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66791 Malicious code in annual-aqua-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b85c9d497b8d6ccea223bccd2a402de540a6cc8c9ed3784b0293b5d817aaeb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66744 Malicious code in allied-moccasin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37e35c7eefee0d4b16c8347a56765021498806a24172680838e810f29f8c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66562 Malicious code in @bipyruss/luminouslab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18a63a96569554dd1d59d538be2efef522ceac3c83f85bbf79a6befb6d16169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68480 Malicious code in future-blue-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31de4692f7d54bcbe624fe68611f89a2053d0027dab2aa3f6a538d01428a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68211 Malicious code in faint-amber-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5791182eb886438626970f7b800fd9e7455301c9b62655e8b2714d0a9f0330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69212 Malicious code in loose-indigo-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368b1107a69b30edb618fc199c164d6a0e7acfcd82d14a8f23b751a0e6f4f9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71361 Malicious code in urban-pink-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b8e122aa57577d4920fab918b68243b1f825e109db62b540cb2b9f1f82960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69757 Malicious code in original-gold-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72743afea14a8fdcaeea05d149201c7be371c9b0baa8157c1dd64b75d757169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68212 Malicious code in faint-brown-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b5c19a377aabec8ce4ffa35bac9aef49511b63d4c8f55f50e50cb87927d400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68912 Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70139 Malicious code in quickest-silver-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c585e538187ea0fef65963f6a2af96cdba88b14168c3e07c36f49fc5d5f86d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68926 Malicious code in integral-crimson-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781c1453c4b5ba6cc337af27e030efc0df4edaac77cabf347126d79938f8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...