MAL-2025-69872 Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69803 Malicious code in painful-indigo-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8e7a201f4746a36f06d37bd0df90483327476b3c7d0e56ffd23f629dff2da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67420 Malicious code in conscious-yellow-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d241907818e89eb964c788fb7007e876ce29f7268d28706e72fe0477d0b5bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70130 Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66683 Malicious code in aesthetic-apricot-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b65f28f6b725939bd0f6ea6d4b1a80f59a9dd30dce2dfb74e6e599f74baa6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67972 Malicious code in elderly-teal-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d3222d194fb0a7b004f41672d02bac4918c1164111c504eba9019224f51a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68786 Malicious code in immediate-bronze-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405c32002a35b8f74750d25ce092767677b681887b72620bdbcf1ac75e2bd1c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71739 Malicious code in youngest-azure-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d1f11fc255e5b11cd6a8e8101d607e076d97ce9b67c1ee15c524bb867bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68822 Malicious code in inadequate-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53932b71f797bc22b1bde0044f33a0d4b5393fa5e6f2050c4655af034dad98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69564 Malicious code in naval-blush-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c6dc2b354f24730c9f709e7094fe8e7deed44d81c5c8a342d5080436617a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69762 Malicious code in other-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896b513c2cb00510aac6d963fc128765f95563c6d1b31fe30ae44e653cee2fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69783 Malicious code in outrageous-orange-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe1ec031559021ee997f82088e3df76753ec19574fe779efc06f0c21159a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71069 Malicious code in temporary-fuchsia-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b632e80fb257f1c2632572b4cdb768e6a8aa79a52e199ea2d55649fdafda0a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70476 Malicious code in scary-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1e4ab8212d00cc6d72c26cd8e6862b8b07a2f31f292cb44207f93fa54aeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67624 Malicious code in dark-rose-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68685 Malicious code in historical-aqua-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c12aa59ed503981f956a6706c77f472f9fe28374e7bf39a7234a4ba5c745d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67735 Malicious code in desperate-blush-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62092cde52d6034b8851dc11976ca9afe23683c56a45a346dc5a41eb0f864c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66707 Malicious code in agreeable-magenta-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbbe43cb2baeea5965e26d2a22c285a62491851a10698c44b7f40ea4092be65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...