MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67989 Malicious code in electrical-gold-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf90a227c2a8580abf1cdb50653fc11cd53371d7237c1ef6d9fa3e76ddb5322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70723 Malicious code in sore-peach-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1e0c415f1daa5d0dd8fba7bda513defee10c9041a2e36b269bc94b48e6de87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68721 Malicious code in hostile-rose-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc544884a9fcfa4d0ca3f4823ed7420bf54e49d5c0e2a0c3d3e1b5ee9ea17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68046 Malicious code in enthusiastic-salmon-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c264ff8352ce4a661f0c8f9b9ac0965f65b8f0684ede6f87f2054d510a91eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66635 Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68722 Malicious code in hot-amber-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7075da0b286d55066fbcdd69b654e9a899c828237de81cfd5523e7cd0c64367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66563 Malicious code in @bipyruss/nebulanomad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db67568dce6e7268c338052b70b603f10c69363ea9972f8e3a08ad824abcdff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69121 Malicious code in level-copper-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29315ddbac3b0b833f90a4e6566275ffd2fe34fac89cb6d49d1c6971a469773d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68041 Malicious code in energetic-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f416827b5d729f75586bd613e9b43f8a7ff1bf5bca348465ea951cb60913f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67690 Malicious code in deliberate-beige-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c95c0745b9998315e41f8ce760662d6d588fa027611f87d710989d25d970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66575 Malicious code in above-coral-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67666 Malicious code in defeated-red-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec559c87f69512c047fcd2c9e41f52998d90244b1a880b539cce945ddf4a193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68248 Malicious code in far-cyan-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944b21974b029f88f19d57fdca99b2d70d2185ad7d32292d5291b2a1d6ba76a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68000 Malicious code in eligible-bronze-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387c6bbcec344d246523eb5045a18982753d70cfdf226e3968e099dd54f66383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69905 Malicious code in plastic-silver-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05af4b90223b9d68bc2132ecac020889c9f11386c5c4c693912cc7465c4cdcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69996 Malicious code in pretty-white-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800e88e667decb065602486fbd0add04cd5a3484811188bc3320f379d925d6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67428 Malicious code in considerable-gray-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6eddda8f12b7e8eec0de09bf526a87e626a760547f1332953af7e4563353f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69277 Malicious code in male-tomato-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd5c4f438a14f782e9e5308c56c35c3cb4e4c3b30fc85d1de80ccf9e28be0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...