MAL-2025-67058 Malicious code in brief-blush-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095d55d4b3344ebf673875304db54a02e15c22ac8ec1997be78a8e5a0bb3a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66688 Malicious code in aesthetic-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1719c0afb6f9683434f5f9bf17ee5ba0cd20d4ba4420ae18a18800195861d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69889 Malicious code in philosophical-white-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e3b1f061e78db53cae90ba7bef928f2339dfc5ab656dcd44f1fbcfdbcb96da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69679 Malicious code in obnoxious-blush-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4629cb8898338b5ee87ffc8c024e3500d93929b0e8770e0f31606e253881a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70753 Malicious code in special-yellow-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4806075a97830de22dd5f0815ac9dd71c27c68733d6895ad9937efadbc541aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70823 Malicious code in standard-magenta-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ec46b7fa77f3f6990dcd4526b605d858f99b96838acebaf60601fc21c082ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67216 Malicious code in clean-ivory-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0905ae5cb31fde3736b0d1ff9bb65cd060d3eb185d63a72f22a1147ae5fb83d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67368 Malicious code in complex-black-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca9e5db858c1064e6a1d9b2d6e7bbbfb2af406769f92fb9dd372add98e00980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71628 Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69508 Malicious code in musical-chocolate-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65c929a3fe8b88c590d895f6876eddf37f49085d90731c5dd548fa4024c1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70474 Malicious code in scary-chocolate-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a0077188d7dd2efb9e58974b5089176217481a1abb05baffa279e5dde89ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66577 Malicious code in absent-gray-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36306cd52e91030f33b057688d85c17690c6059605b360d7f49ad1d87f049d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70692 Malicious code in smiling-copper-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df720ae901fbecd45ee28b0d2f7c44a9e69074904112538288cb5a03628a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66782 Malicious code in angry-teal-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9dfb806485c035c3d54fb2e1d52dd0eeb29a6659325e1678f9f510a44305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69332 Malicious code in maximum-white-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c02c7ac59b593ead2e56fea626acd3c9abdbb47164b3a702aeb4d7ee9fa9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70975 Malicious code in supreme-amethyst-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7445e8253600e93b63205ff1d984f7a3e3275f6e61bf892bc143291c802a363c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68708 Malicious code in horizontal-copper-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc611d0158804ffbd74e50241dae09b0029cfe3e362787c5950163ae43176c04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...