MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66947 Malicious code in better-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86a37b8840eadf6ef74ff1d3d364d711427bd0a7c5fc9a52652b12b74e7ea3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69984 Malicious code in prepared-lavender-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad097a7c78c3365b19f5c6c2119ad0ba2ac1d43dfa734457ca5066fcae35453b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70251 Malicious code in regional-bronze-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68af5733f2a0d02c5412b9efe371bcde2a17093656db60076e755a6161a6b1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69735 Malicious code in optimistic-sapphire-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3c440a76df5fd85bae524defed8dc8bee7aae6e832e9d22d16b1f48f1a8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70321 Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69066 Malicious code in late-lavender-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ee8d3765121474419e983b72b283324978a1f1b84d3d4d9d439d46a5cccdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68384 Malicious code in foolish-fuchsia-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab91fd12ec137ccd80e1dee3869954781c6826cf5c774b448941f750944763a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71143 Malicious code in tiny-aquamarine-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 732b539d1cd901984b987e445287b3503aed960b724d962713e3fc06ac7d8a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69661 Malicious code in nursing-crimson-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5aa9e2681e18d7906044b91819dddaede9910b1d4380330fc9626f5d915f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68403 Malicious code in forward-coral-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4163e4c6e52845a94770049fbce8c5cd88195435dfc76afdfc3b66decb1a516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69548 Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66969 Malicious code in biological-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e3c5d54095c7f4b9f24445b33f2cc6e69e4f97c9e17c68b92a0da548fe01e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68525 Malicious code in given-amaranth-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c2d5761d03950ea05f7c85692de994e4d003d1fd15816f8f63ef94e134c26c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68780 Malicious code in illegal-copper-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4ac9d69a6c861dfd05bd04ecb853c7717052eded60faeef4301bdd2fa226c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...