MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66715 Malicious code in agricultural-black-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71122f2472a41a2e23826ac83bd59f536a662514a98797eec62aebcf4773c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67174 Malicious code in chosen-cyan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd2fae4f54a03ec32a8320921731f7c0b454d6ddf2fa1650300b75081df8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68392 Malicious code in formal-turquoise-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b36030db5b8f99b55ddac5e1573e0252e968be79559c4b663c0524c53a5cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70673 Malicious code in slippery-jade-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48662f6e9427fcaf475a0f665e6bd98541fbe657f3b66c4519bbcdd223bb602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68555 Malicious code in good-beige-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2781149fe68bad3048a75a17780be2918d864c899bab4d25ffdeab38a8ff2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70272 Malicious code in related-yellow-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97cc6b7bcbf334684aa1a74bde5fb5fd02cdf2fcde2200107229fad4a30bbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70414 Malicious code in romantic-emerald-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e486cca7927a40d92f742d71581d78820c2974078854bb93faf6cb5229248295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66706 Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70315 Malicious code in remarkable-copper-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c3f9d83e5d2d78130d8059de0e25fc272730968b3b8e037bed916038dec3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71782 Malicious code in zippy-aqua-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478f3cecff20e4fc185cb82ac7476fb68d395c32d4e125d7252dd4457dd347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69277 Malicious code in male-tomato-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd5c4f438a14f782e9e5308c56c35c3cb4e4c3b30fc85d1de80ccf9e28be0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69121 Malicious code in level-copper-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29315ddbac3b0b833f90a4e6566275ffd2fe34fac89cb6d49d1c6971a469773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66563 Malicious code in @bipyruss/nebulanomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db67568dce6e7268c338052b70b603f10c69363ea9972f8e3a08ad824abcdff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68871 Malicious code in individual-turquoise-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8226e46272b8ed4af196c8261f5b61f3e2206c5b4a1ecca1dd2c5c9beb6430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71564 Malicious code in whispering-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22198422df8646ff37721225ff14a0e4e29715971d426dcb934575e2ef6521bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...