MAL-2025-68572 Malicious code in gradual-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29815c01510521dbef05a526c0c7e43cf670b658a41104bd3e9fa3e19f9aa95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68310 Malicious code in feminist-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8e2da2261b0094399538ba597ec863f6159895064cea16c397175c7cec2f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66781 Malicious code in angry-coffee-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f46f54cf29bef66e4c892999577a450e75fd68c79129b01bf84b5ea4e72a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68762 Malicious code in icy-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ed23d60a636f5d1d228f2e1c5e8432066e3f629a30d9c9a255b40251301a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67258 Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67029 Malicious code in boring-apricot-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915debad11356afad3d36d8878311f5bf0e001479d42f904af6cbd01b8c942e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70638 Malicious code in single-coffee-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae606c8b999275619bb3e60af18827bd62ef3ae49017a65170de163951bd04cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70122 Malicious code in quaint-orange-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e5767635edaffab28783012fb6a59437590bed7753ade9ef21f34f7739b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69658 Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69491 Malicious code in muddy-magenta-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d62ae228ae4a7575e52392f52d4f8deda5a01312a5615c51558c0aced28ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68635 Malicious code in handsome-lime-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323bce7e95771abd60e13cea52b545c7b18228480d10622d52cfa32defcc141a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71160 Malicious code in total-beige-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937791320b2991789e840c2bf698d51500ab692f83b03be91f1513d4a7c63c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71183 Malicious code in tremendous-jade-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63a2385372e4ecdbab4226588e0dbbc4646ccf651dc125b6147957e847619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69333 Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70321 Malicious code in renewed-peach-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d33d28a80810af45ac7ffe28c9187b9df16c2f8cf17d374899488be9aea14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...