MAL-2025-68763 Malicious code in identical-apricot-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a06cd7093fb4e7948ede8ddca84a403808c0c537e6272c69f13d5641d0746d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70723 Malicious code in sore-peach-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1e0c415f1daa5d0dd8fba7bda513defee10c9041a2e36b269bc94b48e6de87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69396 Malicious code in military-rose-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537a3ae891c7dcb8daaa75f1cf813778384c76580eb3231d208a1ed94290f0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66629 Malicious code in acute-bronze-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e254478c454fd14b13f56821a18769184b9289364b23c5e04f12629d3e08fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68650 Malicious code in healthy-copper-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a27bda73ac41d9a5a074a7eaecda04fa99e348444c37daf1862818d1fe4364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69689 Malicious code in occasional-apricot-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dadcd4d4df85ba663f9be3e9a13e9545ecdaabe00bc22fffb4f830d7a0b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67076 Malicious code in broad-amethyst-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e263cdb263adfee24f06fe9872ea96c8179d80f1a28b8626d73a5d2d878f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67373 Malicious code in complex-peach-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f128ef25cf365a2af343225b257116e9c34637f6e4cc5e3ad10f81e67756023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68826 Malicious code in inadequate-teal-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c634bbb2a7ec8a5a8b68c26702cd247255594cd5ef8c755b3d6814212b475bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68153 Malicious code in exciting-maroon-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae7ffff45f6462ee052333e75268751b29cf8af656df9ec8a8c8e28c53ea070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70407 Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70292 Malicious code in reliable-purple-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6646b22c5e66eeeb9121ff5987fffa05836d1b8784f79ea3bed543e9744ba250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66988 Malicious code in blank-rose-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdbb6d4817666074de895b4a215b9771475cf1a4f77284c2613d3792942870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70056 Malicious code in prominent-moccasin-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58e694e074fad1631040ad2bbdb3885a9d18dcaafde0e6f1baaa4405e4da7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71563 Malicious code in whispering-moccasin-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65bed430a21b9665a25de32202fbc46453d83b82ffdbea1d90d896c0e4285f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68595 Malicious code in grim-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68127 Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...