MAL-2025-70094 Malicious code in psychological-copper-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d12414add444730a4cc30a6fa36093afa8df0ff4b9a1933053edce4c8f02639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69442 Malicious code in mixed-crimson-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d0b9b18d72abeba489dd2f435608f82984eb8f0efda0fcbf3e8732a3afab6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69029 Malicious code in just-gray-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7873cdf2493f3e62b43adef4234795dcaed3b9b8d92ce960566ef96efd436dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68897 Malicious code in initial-tomato-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371a6a94c80da6104b4cbc63e4c3c7c8285bbfade217a535b1918a5b6ab36cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71605 Malicious code in wispy-gold-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a112a47cba6af55d4b274bb00c962f12bbe839aea5271a12a0ba0af61ffb31af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66710 Malicious code in agreeable-white-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb629059b91801d526b9fa1b24f0a92cbf1a1c9cd8d545af261caf98a2768820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68141 Malicious code in exceptional-olive-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6559adf490b72c6743b31e0e428e1a0e9f377bdbfb0f2238ec95c7e6ccbd62c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71452 Malicious code in victorious-turquoise-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe9a2aee7f0c1bdaa9b4489ba5e85b487766abd34432328b7062582f15da173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70532 Malicious code in sensible-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325d56ae75be39c05ef47f3d087a3582d4a13aa3374373b6c06d044ed48a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68091 Malicious code in ethical-cyan-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942e43edf6c19fa621c8dab170c464920cf42f634be0d22a1339327174535f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69389 Malicious code in mighty-tomato-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1280df31ebaf45f4a2ebc83b3ecadaba873cecd55cb99ce517b933ee41356092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67736 Malicious code in desperate-olive-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4206ee2d412f23018be0916573440a8080e490cc58cb10fb80f3d564241dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68212 Malicious code in faint-brown-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b5c19a377aabec8ce4ffa35bac9aef49511b63d4c8f55f50e50cb87927d400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68222 Malicious code in faithful-jade-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187f3b1f1a7ece79e148e5192a6f1d5f7952b6d22c7a67579e7a7bfb308b1411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66660 Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67524 Malicious code in courageous-peach-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b82c310b25a4f536745c8e6396513f220f2c3582b3324c0d47b16f7ac4004e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68386 Malicious code in foolish-turquoise-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd823ca67cc3e73a4631efb98fc7fb2fe1f210360c2a7f24d9394ef0de45b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71409 Malicious code in various-cyan-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87514691c78c07a3a07fc5b5e8ca405fdc0f4eabbf360c7b507ac8083342b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67342 Malicious code in compact-maroon-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909a58b99ce334b90d44a602b9d9f08389a8b8b22443e97914e8ba2ef29a4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...