MAL-2025-68187 Malicious code in extended-maroon-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4139b5078c4bdd3da110e2a6eed8fe3ac6d63206cc95b396e90a16f22d222c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67290 Malicious code in colossal-blue-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba283d6d87d931e7bd5188f8511c52182824eb285244ec3fa84c488d1fb7742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71395 Malicious code in valuable-beige-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fa29e81a004ac372035a46736074172fdf9f00ba098abdafc5704a175d94f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68256 Malicious code in fast-azure-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55b577e26ac0553e3382f2454fc67c337af92ff08e97041f4b7f3b5bdb92e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68281 Malicious code in favourable-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c2655b76e640c09d37b15baa994513a150b41cddea83f2add61904e688bf5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66577 Malicious code in absent-gray-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36306cd52e91030f33b057688d85c17690c6059605b360d7f49ad1d87f049d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67767 Malicious code in direct-turquoise-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1328b044e9378aaaa0e0f71cd4c2233e37e4722682788802ae27fc199a922053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66688 Malicious code in aesthetic-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1719c0afb6f9683434f5f9bf17ee5ba0cd20d4ba4420ae18a18800195861d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70104 Malicious code in puny-yellow-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47958ce0e75f0836a42722d2a4a958cce61920b0bf8257d7a503ff10d79786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70369 Malicious code in retail-fuchsia-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fcf01baeb45153fdeb74f5950e864474bca62a8285e3b6678078932d677763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70007 Malicious code in primitive-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c1b77f2f2a8a352dee0e5843d55a43942177284d16b3cc2b98612817f80cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67686 Malicious code in definite-purple-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870f206af59d7a04bd1467145e1117bee21ecc36c7c589ddbf1e5ca38333c938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70502 Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67938 Malicious code in economic-teal-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b297d94c842fc2e97ed3e4b38222ec988b622520bb713d2af558e8c90d792d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71480 Malicious code in vivacious-harlequin-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831b5de2e9e7abc01224fd588df7e23941dc986f7e24a44b16493dd7306f29a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70699 Malicious code in smooth-coffee-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97818a6ce079959b9e5dd4b5f4236441c26c671bb5ec0ec26d8f541e2e8e83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68645 Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...