MAL-2025-69973 Malicious code in preferred-emerald-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95ad2e7da55ce43a9f5f89edbd298df53f758d79846703dd38fc57cd4b4c663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70555 Malicious code in shaggy-gold-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c27fd20786e557024a8e871bad40f601a40e7c6c09ac823efe36308295988d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69895 Malicious code in plain-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2d183b5dc033b854d7d1583dafdb63ffc047d6cfab200981ff1eb9989f27e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68723 Malicious code in hot-copper-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab7476b47cb801d6bb9ee12dfac0af5727f9ce256bb96e85ccf5d168258463f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67651 Malicious code in decisive-gray-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3d85252787a911ed784ff099f41c3f6884b92310e856ec4dbaca4d11251b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68816 Malicious code in impressive-salmon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27c052308b9f2a1c420d8633ce9ba85ae2132b1ab5cae14b99206c521249cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68508 Malicious code in gentle-red-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f1c30fd60de2ddf6dd247ec45d89d66fcdb1c85658d42520e3ef464baebdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70749 Malicious code in spatial-teal-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cf0d9f94e03bdcc10532d6b754e82e715fcf17adb663b92963884228d89625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70723 Malicious code in sore-peach-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1e0c415f1daa5d0dd8fba7bda513defee10c9041a2e36b269bc94b48e6de87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69631 Malicious code in normal-plum-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6450bd4acbcd9bf78f4d6ace5062b53d0b5dce3e7013e7460591b14e060ac849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68867 Malicious code in individual-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3254928a97f74e1c0cb5c402a5c1ebb2b700228cee8b97f5d504749684cb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68916 Malicious code in institutional-plum-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36cff742935a25e793164b1dc8ff5cfd7238f838b48b82d4b5e174f502a36cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70895 Malicious code in structural-lime-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35ed53ca2b803218563b1208f6b298f06ffb72467bd82416c7e9eccf380b999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69229 Malicious code in loyal-chocolate-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c78aafe60d51c46f2d6020db72b2ef107eda61abc83946653ccdb494f9c3d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67249 Malicious code in clumsy-jade-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d1906f7a8faf65c29d6dd22522ae3efb73ca011658664e0464a9691be0087e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67859 Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68600 Malicious code in growing-amethyst-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b32f81b2c88badac94059bce3ea85f0179bbe056142194d9d1544ac82e9c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...