MAL-2025-67055 Malicious code in breezy-scarlet-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f44a5c15699c0f355137f0a97a513d7bf59bbf67edf93e6cae483770031a04aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71136 Malicious code in tight-copper-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c4b63883ccb709694df00325e9d5182362c77e2eca8efbc0dd2ddc84e32ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69357 Malicious code in melodic-gray-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963534d98e1a567e13c84016da28e0a487211dfcabdae487c40d4ed7219a9725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70323 Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71234 Malicious code in uncertain-aqua-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4845454970584fe49a9dc1de19b152a323db0038dbd672c980b87823fba31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71596 Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70473 Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70577 Malicious code in sharp-amethyst-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bc1c1485aa1b6284c291fa195ee6b09c29aa0024582ea46f3a162ed8587665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70511 Malicious code in selected-brown-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefec0aec95de5deec86e4c8c6151adf56b0296297ca2c20fde10db7bead2f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70270 Malicious code in related-salmon-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfece147277f66e04227a53d31516d773e79810b9f5e5dead4326db92009ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71217 Malicious code in unable-blue-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93b88bcc31105dc32dbd8f4be13af386c6af50d7872ae0d50f01334f3378964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67901 Malicious code in dusty-jade-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c9b64f2d6f49f51711bb433ada582350b0a007a8065b7183950e9df8a4c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68506 Malicious code in genetic-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631e2e8ab0e45528fa7a8fcacab0eac1a8d4b787560861ff8e93024076bd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67991 Malicious code in electronic-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22e2e1db8bd222c9a6e0147fc20af4d7973d1f81b233b5ab0c7d33b3452292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69694 Malicious code in occupational-yellow-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d335c92c424c0fb20d0ab19aa67affa008f724f8165dd957ede9dd6a3c1b2dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic-apricot-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6d703f2906748a756406726d5703b3c19c4bc00dcc725d07b51dbd7b9990d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leechsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50db7ae6a1e0fc398d65dedc6cf72c6d64a5b84225be60798b09793bd3ce0159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...