MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69007 Malicious code in jittery-beige-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb31d352bcf3a879c1e158e18a03971a2bc0b7e50bdf29ae3075d67132b6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67896 Malicious code in dull-amber-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789d459d1cc7730f5ae775fcbc9dc8c66db105fd90f8343c4f1f7829c6e4488c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67175 Malicious code in chosen-indigo-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd0a3ac28e00cc5fd787cf4c358d04675cf3c86acfd4add96ad0c2cdf56d760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67316 Malicious code in comfortable-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3629ff063335e12551b1ff7b2ea16aa6a21934bc59274cfb5425f7c969100d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67981 Malicious code in electric-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e979048cebc77ac919b9aabb55dfab63613acd6cb7c465c2be480d4d9438e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71551 Malicious code in western-lime-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8516386775009d1baf8516242f7415014eaf0f388aff10db5f26dc816f9372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68951 Malicious code in interesting-gold-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1b0c7b2f6c50e495e05eb1fce1e6c6e892b8eea7d89107a0049a78f74977be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66975 Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68635 Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70226 Malicious code in realistic-silver-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e89ed6c830543fa1162c4502ae7d80624973e8e50e2a9db51e2158b96800d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68780 Malicious code in illegal-copper-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ac9d69a6c861dfd05bd04ecb853c7717052eded60faeef4301bdd2fa226c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66645 Malicious code in adequate-apricot-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9af5f501e85007259915f179c4faa7daf0d29f62f162369b706ce2f8aa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71183 Malicious code in tremendous-jade-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63a2385372e4ecdbab4226588e0dbbc4646ccf651dc125b6147957e847619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...