MAL-2025-68664 Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70871 Malicious code in strategic-emerald-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518b134199237eaf5e1baabab61a32927cebfbcb3b66ca2443595a0318c6ad46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67156 Malicious code in cheap-jade-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a81d3659d9fad15ce97a4bfbe71d73124eefbab59b32ef6330f292cbcd96a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68951 Malicious code in interesting-gold-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1b0c7b2f6c50e495e05eb1fce1e6c6e892b8eea7d89107a0049a78f74977be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71142 Malicious code in tiny-amaranth-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9063f345f407edf15ce0bca25c62dea86bd6c812c68c66d90eaf10ab640ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68802 Malicious code in implicit-orange-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edda98ec0545f06e72ae32c79ec4f541b81837034de791396beca34b8d65d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71050 Malicious code in tasty-green-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca26a3527b4ed9f8d552622389bfb350aebbafe1e1e08a436811e6bdefe51d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68266 Malicious code in fast-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175116f086b8d70983393da40e15c19aca1da52bfaa3d6e6c99e9e1ec3080778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69518 Malicious code in mutual-tomato-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d66fbf6fcd72ddc3198e742cb9c5526a336ff4af02f2bfee042a78d03c8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71782 Malicious code in zippy-aqua-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478f3cecff20e4fc185cb82ac7476fb68d395c32d4e125d7252dd4457dd347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68954 Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69030 Malicious code in just-olive-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2b3b7482758c1f0981d8192d5a9472891ef33a3f9d9e9e3e42c6f167eb1755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66948 Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66602 Malicious code in acceptable-copper-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c4d488e2b83fb64622a88c2da565b42248b1bac346d25ffe38e09394213200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68582 Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71422 Malicious code in vast-magenta-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f07028a9ccb5f65ccbf2c9f075769a86812bb3287abf016d756e4c316cc2456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69271 Malicious code in major-red-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb2bda60ae750343511264b364428d01e75c687fc4ddf562524f6e3bc8f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68904 Malicious code in innocent-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b120a2836ea82ea14eb9049b98c411f50627106ebb1e127581bc24ee38bf03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...