MAL-2025-68840 Malicious code in inc-turquoise-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af907267455f9fcbbcb270b63e8144b808f98c148adbcc29c881673fcb807f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69960 Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67031 Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70047 Malicious code in progressive-apricot-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2a0913145f1a2e86c5162f180bec4e8f15645b1d251446b6e3c418bb8d4108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70527 Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69506 Malicious code in musical-amethyst-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e57fd3542a57a4b39709cda0e95e2d004279ca71348b2b9ccc05ebd41503953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69882 Malicious code in petite-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f933137ab6d7196f261659bdfd0cf3c4641d58e8d9faec7f895d77db332c74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66789 Malicious code in annoyed-tomato-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b72e1bcb68198f717ccb26766938884e6242a33ff6c533b11a8d574d62bc00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68132 Malicious code in excalibarx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5432f48f86ed6741ee63abe7aec152cc2be52fb010f7339e0e8bd5ef3021f711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69799 Malicious code in overwhelming-chocolate-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd569c06bdcb96fc2ddb9d63677ea1b92ad46942386b3dfbf80799b1dc9397d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69973 Malicious code in preferred-emerald-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95ad2e7da55ce43a9f5f89edbd298df53f758d79846703dd38fc57cd4b4c663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69358 Malicious code in melodic-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ee3638c036a24c862b57966826c429c8628bab3db74c27ea8dfea4e094b2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69277 Malicious code in male-tomato-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd5c4f438a14f782e9e5308c56c35c3cb4e4c3b30fc85d1de80ccf9e28be0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68723 Malicious code in hot-copper-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab7476b47cb801d6bb9ee12dfac0af5727f9ce256bb96e85ccf5d168258463f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68392 Malicious code in formal-turquoise-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b36030db5b8f99b55ddac5e1573e0252e968be79559c4b663c0524c53a5cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69985 Malicious code in present-copper-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601cc2294f6ab4a90ae3a9b6516b2f7cff77e65ccd5369bf256fc070cdab3359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...