MAL-2025-66635 Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68105 Malicious code in eventual-olive-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a4d5b01a424b4771e5084ef2c8b94776861088c9c804c3282a5ac2aedcb506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71246 Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68071 Malicious code in equal-turquoise-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd228d559a82b995a9e6128e1dfcdf41aa5392539db14b9dfa45f998129baf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69073 Malicious code in lazy-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae4daa038f351673b5b76520af182653ceb094019af2896d7358fd6df1d793c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68600 Malicious code in growing-amethyst-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b32f81b2c88badac94059bce3ea85f0179bbe056142194d9d1544ac82e9c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70863 Malicious code in straight-pink-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faac6b1361fef3f7dbc13df386c1f409609729bc4ec04c99543b040ac5fb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67371 Malicious code in complex-gray-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf98bab76852457f1d78269a39f08f1dd4201542b66482c2e2d47d934fb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70069 Malicious code in prospective-bronze-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bae05cdb00c89ff5917cb13ae6672fc21b0056696669e5cd35a17f39ccd45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71043 Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69895 Malicious code in plain-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2d183b5dc033b854d7d1583dafdb63ffc047d6cfab200981ff1eb9989f27e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70249 Malicious code in redundant-olive-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e798dbbd72850181ec6ef3befaa8822ef833714948a5bf4ec1d5c588f48ef2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68508 Malicious code in gentle-red-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f1c30fd60de2ddf6dd247ec45d89d66fcdb1c85658d42520e3ef464baebdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70549 Malicious code in sexual-coral-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856eee9d068ad2f981ebe9e28d3bc24a62442f2ffb5341c2b7e61ccfc83a2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68826 Malicious code in inadequate-teal-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c634bbb2a7ec8a5a8b68c26702cd247255594cd5ef8c755b3d6814212b475bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71782 Malicious code in zippy-aqua-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478f3cecff20e4fc185cb82ac7476fb68d395c32d4e125d7252dd4457dd347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71510 Malicious code in vulnerable-plum-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8636aa46a14abec32cd056771fdf0e8b7ccf52ddce2d1374613ef1b252862a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70521 Malicious code in selfish-jade-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f871d364c39f8c0e66c70a1cc29151641eb2c42a2c241e1456b51b92134c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...