MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71531 Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70816 Malicious code in stale-amaranth-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30865ce88be67ee33e319b70734b0257ec87da34bc8691665a2a89c1ed9a460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67218 Malicious code in clear-amethyst-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb4ce55da3da3afd5d9d868d43e2f72599d0c773087acd1ea171a4873667467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68053 Malicious code in entitled-apricot-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f1a1f87eebdcfa71e0d151c7abef90d5d9b501676fa011b5e489452a58ff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71210 Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70919 Malicious code in subtle-salmon-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab8a18937d3c40d6a3d5385156c3cbce776feb9393fc6ed42cca8ae44c89835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68518 Malicious code in giant-amaranth-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31af5f91ed41dd1b5f6b4003f13d447b3c59c6a6ebdd7a597b853a4a14cde53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69452 Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70465 Malicious code in satisfied-aquamarine-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb98ca04511525550de5ffff3d4060af4c9a48c61afec738856f4fa51de21c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71794 Malicious code in zoophagous-green-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3c8df52a12fbe19bf2b67d740112de857842456966b835e8db89090b1911e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67765 Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67909 Malicious code in dynamic-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f97e59e11d882fec97c81887ccb9983f47cd319474dfff85f8e9fd4abfd099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71119 Malicious code in thorough-amethyst-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397318b7b2fe19b02dc65ba5d0e83dfcd6ca2adc224522b9bd51e03bc6d229b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69517 Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69722 Malicious code in operational-gray-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb1b6aef8c89983f27b6c0f5469e88d6727aedb8124f92e22351e0edd8973a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68938 Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67108 Malicious code in capable-tan-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860e833ca394aeb9e14b4db0ab0b492bf12fdf6770bf82c3ac8fe02d27d914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68391 Malicious code in formal-tan-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b7af47f718a58247cd0b3e993a1b866a6d6c0aa4cb45be4b226903f8ae69cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67091 Malicious code in bunneby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5820cfd0dccdb0254edffb9a5e8189cf207068c5def25bf81d048eeae5b8a5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...