MAL-2025-70983 Malicious code in sure-orange-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bec772d8fd0f94651c14cd2d075de568040ed1ee35ddf9d4af01bc6ca7c0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71088 Malicious code in testy-violet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25d400cc642c381645aec0ffd1ef6ed3aa3c3f3b029316ebbca2c6c49290051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70601 Malicious code in shollypeez (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3ce566bd795207c0bc1cb9d587dcab74e6cafc41b530a2c6d9c8a7005ceb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69174 Malicious code in liquid-bronze-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149dfc613289074d944a346ebe80bc1a353e49827a38a2c17c171e9d5683dfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71649 Malicious code in written-azure-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0986ad15a73a8fd29d8f24e25dad0cf708482a0fd2370a73d604ee85be9333c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71584 Malicious code in wild-fuchsia-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def211c66d852174eefd2de3b24a6f80b5b721a45e9dbfc0eb0e5dd01af6c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70322 Malicious code in renewed-silver-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abe72dbc4bff9f5885e95816e5d1d2c694d94cddcaf2b5d1640ba53266189bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71482 Malicious code in vivacious-white-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1db600c4af5daa756e8469d9a60965e474480ec7570a0b8e98e7ad7549f697e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67425 Malicious code in conservative-pink-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6c8eeb6c052d5b8292efa3f04ff30e890681a243f67068b414b6d05d99fa1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69918 Malicious code in polite-amber-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb50cb1a15dd90fcb90dc3bac7530e6b8b2e9dc409d48fb85bbd08b675ecdaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70023 Malicious code in probable-amethyst-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcb4083e0c16d9ccd4fe298f2f0d0cb335ae639e741f9025cc1a7c0f233ba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69925 Malicious code in poor-indigo-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195250051088e480a83073204add7481d7e5043bb039e0d1b54c82cf2347b15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68800 Malicious code in implicit-chocolate-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ce71a3e2d18f0e12ca86af43879f3fde6721fed61c3aede0ecd42778ed7ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67222 Malicious code in cleitczx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56840a4cfafbe2a9a38d59f272a2b544df7ec19e1096b1dd6881e4f11f36de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68803 Malicious code in implicit-white-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91694c4a9afae038f8dc91888b8cd3c18dd223c7a9383ec6a4ee247df1ef149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69227 Malicious code in low-green-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e478bcfb14b8684de05dc827773228752f71e2a2af1cfb0eb85f0c0f41d497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70339 Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67337 Malicious code in compact-beige-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa24721be18045cb4cc85b77da967c9bb9dd61da50916f83bcc7610ea5a69ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69076 Malicious code in leading-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d572ac374f059d6e27914bfdbee76b3982214424c0e27ac7492f241bf3cceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...