MAL-2025-68523 Malicious code in gigantic-purple-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1593f710a77caadfb2d9b68900a5730b8ce4dfa5a2e7cec0f1f3e1474d99019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67851 Malicious code in double-sapphire-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c79e97c70da78e4693d25ab309a27639b45dba0167fc6a60f56695e0309373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70574 Malicious code in shared-gray-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651fda6b3b6e3ab7abca40dc135408b298dd8ac1943b33f5a069272538df2489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70797 Malicious code in spotless-sapphire-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620cb9f8abb1c9e40fce53ffc026c9620e57eda993fca43dd9114b0968810a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69121 Malicious code in level-copper-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29315ddbac3b0b833f90a4e6566275ffd2fe34fac89cb6d49d1c6971a469773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68621 Malicious code in guilty-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82d6815420e7d8c3a0dcbf323fb4a7335b3f1e8ad24fe7b4e44876df129ed53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67877 Malicious code in drunk-white-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83abc384663923fe4d2a9e950a0f609c64d9c5df021da149d7146cc99f5be48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70723 Malicious code in sore-peach-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1e0c415f1daa5d0dd8fba7bda513defee10c9041a2e36b269bc94b48e6de87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67428 Malicious code in considerable-gray-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6eddda8f12b7e8eec0de09bf526a87e626a760547f1332953af7e4563353f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71185 Malicious code in tremendous-scarlet-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40213fb2894a0142e877ae2527ea25813893570e7edefa1fbf2eb29f190f4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69701 Malicious code in official-green-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bd057ebec4d6117c8acb3fa003625c4abef79d72912aa1263306073f1a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69652 Malicious code in nuclear-cyan-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa32e8c338373ec53422b37da9b5c3c3478e171d678442cdf50f7fad4975ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...