MAL-2025-71233 Malicious code in unaware-silver-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cf9d6fdb5102bed6345fdd599be7a1e6ec36f75a8ac72e2e9ae979e3a2931b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66896 Malicious code in awake-olive-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817d74beb92ddab99b110fdea62cbf1ec6c09c5f3716da5f36951e161ba8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69175 Malicious code in liquid-crimson-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87da9a7f16c79bc4ad163cefc681c9b1c80c43c146ae05ff51f4087ad9a9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67729 Malicious code in depressed-teal-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c83bbd5d56218c58308dcace51f1922633eed6a2217f362be0452744f099b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67112 Malicious code in capitalist-yellow-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ce80b69086eeca9996b09882eceddbc314bfa1cbb366cbd3075add499f8451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66721 Malicious code in alert-sapphire-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f6b019f45fc95dc00d8d7b386d771474b9a02118369056eb237de00e61e1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71604 Malicious code in wispy-brown-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f893c3972aa0d3b8e803417940b528f11557b66214b86203d5e18aee225e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71004 Malicious code in suspicious-amethyst-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae072b03a5229101320d49a70e6d5df042e3d99e00107484cda9e149ee76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68058 Malicious code in envious-plum-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3e5978ac43ad3d3cfe803eb52768c51dbf2c70be52d37062aaebeff97e8966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68591 Malicious code in grim-amaranth-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a85e46e99697482cd6ec15bc93e27cf4afea62524dc8f972e2f536d0e42b49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69786 Malicious code in outside-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c2403ec009bae787e2cc2ed0760cbc5136a048ac27e49d234be300edc4c4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67348 Malicious code in comparable-gray-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67cb484f0274d22bc4c8138274b45d40c5e3bf3400b07c11cd144077b9062d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69743 Malicious code in ordinary-lavender-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e09424abace5480ba4d3029d00796a291efddff1cf2a2d0959ae57947ac731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69935 Malicious code in positive-harlequin-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28ab96560978ece7800a09adfa1abc42662f736a969b03afab3e03fc52beaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70619 Malicious code in silent-violet-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abf472883d065f26ea51bb80cc83e56da0f7d2a07b17ad584384457b28e9da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69611 Malicious code in new-beige-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2979299d170e7364ac51ca44755b82b54e1a34a79bd44fc1694a38f9c9687d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...