MAL-2025-71157 Malicious code in tory-maroon-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58356074918161717db590f0cb301a246bbbd1e486e56552069ce1ceb1527122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69612 Malicious code in new-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e44713ae9028c1c614bc0be670a9821af15234eb187046dde60d420deca9a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69034 Malicious code in keanasti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d640ce8dfbb5452b0680f769221796872d66e6fa0516af040cde2d3e4fbc9b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66680 Malicious code in advisory-peach-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8014c418d30866220e4a62d0f9f88dafbdc4aea2518ad5fcfaefafbc3093d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67268 Malicious code in cold-olive-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a56c7d9be074af501d4c88ba87b8495cdbf0cdcf78a2a2d7eb49d6c031cad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67434 Malicious code in constant-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f562a79cd0253b53812371f27fdc20f9e007b04a03b1907f377e53c044e1080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69608 Malicious code in neutral-copper-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae984325af59cf81691c20859921d7e6afa13dd79c73f625647d9458672db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66748 Malicious code in alone-magenta-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e549a2ae01e474f810f14eb4afb0b1bd12c73e97b3ead5e17e6a9001ed5ca45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70121 Malicious code in quaint-ivory-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c857ff513286c048d80601e29edc3eae027494466bbac98536c4853f4d21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69856 Malicious code in peculiar-amber-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0c652dd015072847a6a59bc198a8aab719d51a8020d8a47eabfcd416dc155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69741 Malicious code in oral-violet-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7702b9c890b216faee7ded7a3a49c4435b00264865d5a045cf206468c57b11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69314 Malicious code in marvellous-blue-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0689dfbf8f9fab7e7d3efda817e3ab3c6e899b9630bfc64e57b39318404c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70953 Malicious code in sunny-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e4a62860b53b5aeb24a37a32f77bf6631e9245b46c8f3d5524f3e7d1d5e15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70235 Malicious code in recent-scarlet-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025654e8799a1bbec9d79b28d17bc415e66ef5bf97916d233b2fcf5e374c9583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66567 Malicious code in @bipyruss/vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabea9f0d2062dd16b78433800d3c5c4f91e4569aa1947f2a6d042e1868d59df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66707 Malicious code in agreeable-magenta-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbbe43cb2baeea5965e26d2a22c285a62491851a10698c44b7f40ea4092be65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69246 Malicious code in mad-emerald-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0205f709eb05026eef5b30ea9330dafc4b92e5ee1b45f95368adcde2be3083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69607 Malicious code in neutral-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ca77a935fbdb3767b79809f0b90c3813cb88c603b516649afeb7e9a430a840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-beige-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb43a5191d8af27f244b1a7a0dec77f265c5cb0371670863d6b8d71823bd7d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...