MAL-2025-66635 Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66991 Malicious code in blind-gold-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc3804c4d05ad0d245ede6a1c768c10781d5196ffc2786b4422d2dd98ed60a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70521 Malicious code in selfish-jade-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f871d364c39f8c0e66c70a1cc29151641eb2c42a2c241e1456b51b92134c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68340 Malicious code in fiscal-olive-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0c20363a8e00a5b5c63fe12fddab697b5d66e47a553d8a6c7441a9890a84cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68921 Malicious code in insufficient-red-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400970f0d41bb2e3753a74d093bda93ca752c71cca0d2ec7dd565cfd97c9ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67146 Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68306 Malicious code in feminist-blue-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c312875fd2feac445324e9a2be83a027eadca1eea1c46e5225c00e1268ec5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71009 Malicious code in suspicious-turquoise-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cec611523826f66523029f1c2be99999437bafa5b33ed3d86c6694342a759c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66668 Malicious code in advanced-aqua-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dc60e2e8c79551aba3afafbb1905e4c49bb2aab9b7845742a4b29aca43abd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67281 Malicious code in colonial-lime-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b88fc66701e898d1e2dd4966a8f5f7f7cc27484f35402f0f16c39846071256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70475 Malicious code in scary-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c4746010c8c717817539b1013ed3143ecb21df2b8bb8449f7fccf9af2bd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68721 Malicious code in hostile-rose-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc544884a9fcfa4d0ca3f4823ed7420bf54e49d5c0e2a0c3d3e1b5ee9ea17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67989 Malicious code in electrical-gold-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf90a227c2a8580abf1cdb50653fc11cd53371d7237c1ef6d9fa3e76ddb5322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67666 Malicious code in defeated-red-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec559c87f69512c047fcd2c9e41f52998d90244b1a880b539cce945ddf4a193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-crimson-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ecf1921767e89ded31d99709191b8c6cede4da7611c0c0d65c4cbd102303fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71185 Malicious code in tremendous-scarlet-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40213fb2894a0142e877ae2527ea25813893570e7edefa1fbf2eb29f190f4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68722 Malicious code in hot-amber-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7075da0b286d55066fbcdd69b654e9a899c828237de81cfd5523e7cd0c64367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...