MAL-2025-68041 Malicious code in energetic-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f416827b5d729f75586bd613e9b43f8a7ff1bf5bca348465ea951cb60913f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70549 Malicious code in sexual-coral-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856eee9d068ad2f981ebe9e28d3bc24a62442f2ffb5341c2b7e61ccfc83a2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69277 Malicious code in male-tomato-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd5c4f438a14f782e9e5308c56c35c3cb4e4c3b30fc85d1de80ccf9e28be0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69306 Malicious code in marked-fuchsia-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60ba6401dce1dcdcc8ee71a4f540a4beed61d9ac0d40150f944d067d986422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71564 Malicious code in whispering-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22198422df8646ff37721225ff14a0e4e29715971d426dcb934575e2ef6521bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66716 Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66580 Malicious code in absolute-amaranth-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9614f7eed3bc024ecedac28967291e8a135ed2c6ccb59dbf56db394604cd3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69895 Malicious code in plain-jade-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2d183b5dc033b854d7d1583dafdb63ffc047d6cfab200981ff1eb9989f27e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69652 Malicious code in nuclear-cyan-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa32e8c338373ec53422b37da9b5c3c3478e171d678442cdf50f7fad4975ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66845 Malicious code in artificial-purple-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d842c9b4a43cccb21636c3a106fd3882e7cd0ea1feb86cf53ed6e58359afd94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68068 Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71026 Malicious code in sympathetic-rose-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68998 Malicious code in itchy-white-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14be44c7d491829ba1090e56b0289f6d4b381563804db2d1a2f3f2ff0b66f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68424 Malicious code in frequent-crimson-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b13b311a5cda812a52e8f87adc5c9ff135479ef223e853c3d1a3190164b4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68867 Malicious code in individual-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3254928a97f74e1c0cb5c402a5c1ebb2b700228cee8b97f5d504749684cb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68871 Malicious code in individual-turquoise-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8226e46272b8ed4af196c8261f5b61f3e2206c5b4a1ecca1dd2c5c9beb6430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71043 Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...