MAL-2025-69932 Malicious code in popular-scarlet-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f9f354cad870277c609953028f91db6488e3a8175d45db9d32a13821158154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68713 Malicious code in horrible-coral-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd76c69f6ef92b0cbb6cd4464b0fe19d5af6d69185be829bc0ffeb85ed2a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69181 Malicious code in literary-yellow-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1595a9bd2622d806d6f177db48601aac68a25593cb57355b1b7ce02cdcc2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67272 Malicious code in collective-black-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba28f57509daaef6f5f46f42995d30a516865e558b818eaf4b07c4edcbb4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66805 Malicious code in appalling-teal-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612fd801148ed5818c5a011418140b35015894a1a1726ef58fe74f9622a66856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67073 Malicious code in bright-plum-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a28efa351aef74dbb07c7ddf4f5c231b701adb5b7c7d750c5697a70a3953233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71353 Malicious code in upset-indigo-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfd230402a7353dc2bed37c90ff25d2275ee7279dda848420d91b8a8d1dc6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68589 Malicious code in grieving-apricot-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a7a34f3a22929204072dbb68142858925c962734e7a97f0c5639cd870a9508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68446 Malicious code in frozen-white-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842731e4a5d31da9b582784aff179c2da71becbd8d9924ca85d16c2c2ff59a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70174 Malicious code in random-maroon-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fd662117256b66fa69595a36e7a7fc6cf2c530fd399260816a5052c27df5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68410 Malicious code in frail-black-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111204f7e92b73141c020c30724d2433b1cdb8b8efaa69b06100169c722f6800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68499 Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67503 Malicious code in correct-brown-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba8aabe183b5c7db186d824cda15d67d593aaf061f0e717f46f98d2807150a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69591 Malicious code in negative-gray-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078412383c8d93120bca3a4dc0acaa725b6a8d55970573c3e9f56b2ac667b781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68812 Malicious code in impressive-azure-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d8dd8fd94701f7a24dab950e00596667f85388818ad4c75fbcb6a4ca141531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67042 Malicious code in brainy-peach-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a991969653c031e6f86963da44038099d6353d2c5d6b10d647ae1123e3086bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...