MAL-2025-68194 Malicious code in external-beige-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77f5786f8f7f91cc3588dbca2c7e91fdf7560795b9f23f6492a5b437c167591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67393 Malicious code in concrete-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e24198b0873c9a263633a821d6f2003f2eebcf73ba5e8ad65dc1c7c8f8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66990 Malicious code in blind-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdcebce115bcc7fa8993bb4e2d2580589b2bc2cf42634c9c9219ae30fd70396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69892 Malicious code in pinkwolv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa34ec5b6f6b0ea500b6738f925de323e34297f13690e7d8b2614636f19f8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66933 Malicious code in basic-bronze-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9f972d9f1a53e3a9e853520ea9427f50296b1f6bff15028c3779a72e80c1eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69291 Malicious code in manual-black-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a394818943d79f41fdc56d4fd7e146087403d867fc1b6fad3e586e386a62848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68944 Malicious code in intensive-aqua-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aa9acaa84379b4e13cf0f109d1647599e1ee3152114f9734b47c2e4f8544e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70583 Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68568 Malicious code in graceful-amethyst-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296ad8b7cebeb3956e48fb3977720c8ed537ebe3b0d59025acd90404cf2443f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66938 Malicious code in beautiful-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9032e564c55b981d9d53f08cf3d0b27ab8bac66cffe7c9738fa677842188dd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71267 Malicious code in uneven-chocolate-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc028dac9f7f90ca3ac492a5438af1b502f2c845366c50704aeb8c388a225c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66738 Malicious code in allied-copper-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be746036ad4fd58c7e73cc48c2c9c50402605d3d4d4d85242ed678b2746cdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71671 Malicious code in xenial-green-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec642678bdd4ba4ea27afcfa4b7475d087b1ccf4c47af0831988b6d2be245a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71774 Malicious code in zestful-ivory-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edb90e9fe37a3bd4e6ce5fc939d5049de73ce2e652a4934de3ef7d615d2f737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68874 Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70120 Malicious code in quaint-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573e39f6bd7ea9fc301b52f449775fc87f6fff68108c35c3450b012f30133a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71377 Malicious code in useful-silver-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db93b225172501042c0f0130a868e665c0b24b4b23726abfdfff336acba52849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67034 Malicious code in bottom-fuchsia-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad6fd6a98328f8630cddf652ba80179bf8d430e0c20a3b2da3c6843e144a2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67251 Malicious code in clumsy-white-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5cab4f4e1e4901e5bf0b3ba11962e9d76641981b82e748f705204191d801f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67693 Malicious code in deliberate-plum-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa2251834590662f9914ce5594bd03718ee5f7b6aec3f5941546dde254511dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...