MAL-2025-69646 Malicious code in novel-amethyst-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd432876945a18ce13a4486fad9082f2c54df73e596f727a05318e75a899f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69118 Malicious code in lesser-turquoise-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975e41ce985e02974fbc00a6671cefe7fcb8972a7b5e75d385613da6ced25311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69421 Malicious code in misleading-aqua-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ffd622ee92435ebce845cdaeaee2600c3b254ca14aa600b3be0658d440b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68119 Malicious code in evident-red-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68107c03ac01e909649fa556dff7a904142956bee71ee54979da9772867430b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69264 Malicious code in main-olive-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5658bbe8d9f66c130431ca5a7e8dddc5d4eeb4a5fa48889cf325759b36e6f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69332 Malicious code in maximum-white-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c02c7ac59b593ead2e56fea626acd3c9abdbb47164b3a702aeb4d7ee9fa9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71668 Malicious code in xenial-amber-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c31293da98e074ddc7cfe45b21bbcb5878fc3966d11cde424f97888f4d69f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68009 Malicious code in embarrassed-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69957 Malicious code in practical-tomato-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2633e7a9d278562971e96f470d33db2791b9ce1f4af3e99d64ec960c8aeab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69812 Malicious code in parallel-silver-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493017337ae3a06d6a22680f82da7d3dd7fe215967acde0df83fabb5adbd17e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71490 Malicious code in vocal-plum-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c62073ec70f75b6d76ec5ca212aa636c435049267496cec64ea613dcbadbfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71484 Malicious code in vivid-chocolate-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e489cddaa4404a17ed2d807695dd1ab0eaefa3e01aec3d9f272e7b902ab1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70198 Malicious code in raspy-teal-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b4732bf62b510971302b292caa48e5467dcdfaeeb2ca52e4852aa141395413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69724 Malicious code in opiumoee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e84d7c04ae3ea4ad4a0a53d4a0753731402b5535db365475096a2a2765e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70150 Malicious code in quixotic-white-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b8d3a18904e52b57a8acabd65fbcf2b9a39801acf782dddad36a97ae161337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68666 Malicious code in hidden-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67180 Malicious code in christian-gray-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25467d1a966e081f13043dc2a05d4baf6a81770fb8f190a4eda25f37f22d53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...