MAL-2025-69440 Malicious code in misty-sapphire-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684df63822d4f0415e2189bb1898899590db165fc99f4ffd8574f57e8774d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68684 Malicious code in historic-purple-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66882 Malicious code in automatic-scarlet-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e846f52ea0f66ec5d6ba06e6207b2100f0f07b7ac28281ba3d6f1468a6842f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69834 Malicious code in passing-peach-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcd93132cb3f00a5f5d160890ca900f1b73283e2cb4e40f65f40049cb2be8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68951 Malicious code in interesting-gold-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1b0c7b2f6c50e495e05eb1fce1e6c6e892b8eea7d89107a0049a78f74977be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70894 Malicious code in structural-indigo-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d54d53d80308fe8de99a61bcfe7285eaeeb75f3f637980362f51c51419eb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69467 Malicious code in molecular-brown-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b448461a3079ca298f1e054407940cdeb9842834f1c2b5feb3cddb65219967e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68895 Malicious code in initial-purple-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b9d9f5f99e721c6dd6a4832f73f6d6d4a0d8231fbd1dc72f2028d48112ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69007 Malicious code in jittery-beige-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb31d352bcf3a879c1e158e18a03971a2bc0b7e50bdf29ae3075d67132b6740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68635 Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71796 Malicious code in zoophagous-peach-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf463ae7b2abb09e1736b2d0c533e373406ce7e8fe3eafa5b09a7e45ed92934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71160 Malicious code in total-beige-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937791320b2991789e840c2bf698d51500ab692f83b03be91f1513d4a7c63c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67981 Malicious code in electric-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e979048cebc77ac919b9aabb55dfab63613acd6cb7c465c2be480d4d9438e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67316 Malicious code in comfortable-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3629ff063335e12551b1ff7b2ea16aa6a21934bc59274cfb5425f7c969100d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational-emerald-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...