MAL-2025-66668 Malicious code in advanced-aqua-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dc60e2e8c79551aba3afafbb1905e4c49bb2aab9b7845742a4b29aca43abd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69535 Malicious code in nasty-apricot-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1e83f29d8f3a617ccdaaa4bf0dad5e6757c6bb2b5ecc3872b4e0007f707d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-green-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c628f0dd3c06d481f70ad0d075c7b928910b99016719bc7109752d6b5952e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67992 Malicious code in electronic-chocolate-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7a1e958b252cdc7dabe16d42149a85e0b475c76d193625e2ccf1a61ecf621b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69580 Malicious code in neat-rose-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91bda3d1da9dccfda717a63e4fe4f68a0f85518d671810e59c5a0109b65f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68921 Malicious code in insufficient-red-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400970f0d41bb2e3753a74d093bda93ca752c71cca0d2ec7dd565cfd97c9ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67877 Malicious code in drunk-white-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83abc384663923fe4d2a9e950a0f609c64d9c5df021da149d7146cc99f5be48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68998 Malicious code in itchy-white-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14be44c7d491829ba1090e56b0289f6d4b381563804db2d1a2f3f2ff0b66f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71026 Malicious code in sympathetic-rose-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67681 Malicious code in definite-azure-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78016ab4b87792e35267607aa3aff485041cadc303aa35b527ceb29e49e3a6a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68424 Malicious code in frequent-crimson-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b13b311a5cda812a52e8f87adc5c9ff135479ef223e853c3d1a3190164b4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68867 Malicious code in individual-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3254928a97f74e1c0cb5c402a5c1ebb2b700228cee8b97f5d504749684cb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68871 Malicious code in individual-turquoise-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8226e46272b8ed4af196c8261f5b61f3e2206c5b4a1ecca1dd2c5c9beb6430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71043 Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...