MAL-2025-67166 Malicious code in chemical-purple-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8be90193f105193217f54a3a8441c656af3b5411cfd14443120ecf844d4cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67592 Malicious code in current-plum-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7585d8b0f8c1752b908e53d79538148847fbdd369fc4ea219889d131ac4279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69908 Malicious code in pleasant-crimson-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73970a646f5846431243a1e1a2deb0790b5daf424cf0e0f82f7b989170954437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67225 Malicious code in clever-orange-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1596f35a38160a7e604107d8ac58c135fc2f9545ec6e517ed7d3c396e214e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69419 Malicious code in miserable-plum-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172a73c7b4003e0719f1e716a5ea303e6e87dd3a4925a622a0f7b9ef11b679f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69595 Malicious code in neighbouring-azure-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1f4c9cb920d4083a01c8a45d49963121b1ad809256d25aaec562aa99d5e45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66941 Malicious code in beneficial-azure-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9652ae51ad8e3347e8f0954fb25c1bb8dbc73324fc3332c9bd0f440e5b30d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68214 Malicious code in fair-aqua-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa0954d82691215f2475a9bc231a3f0a48559802793dda8d0f834ecb6654253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67009 Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66851 Malicious code in ashamed-crimson-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1a532dcb30e8d5c285fb1098dc0c89255879824141082caead2a8335b1f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70988 Malicious code in surprised-indigo-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f277c7ac6c98d18136673501a714f7bac4d7ba4870864df42f90024096b1c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71754 Malicious code in yucky-moccasin-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e67fbdd254c3379795abbdc885726a08aed5e282ca7eeaa0637146088f306e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69232 Malicious code in loyal-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37a823019d4cdecf614b1e5facc002b38182c11bbda9574ddb72a6b3c07eedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67058 Malicious code in brief-blush-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a095d55d4b3344ebf673875304db54a02e15c22ac8ec1997be78a8e5a0bb3a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71638 Malicious code in worrying-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1225987977e80827a0c22788152f478ee56754905d9f67bb6fc1a39460581d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71013 Malicious code in sweet-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331997ca0eae7b1b4bdea256c36958dcfda3325ca0d31d45675339849fab0bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67394 Malicious code in concrete-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2799c119d24251ae3ad925e7fb575fe210a6b1e49f7b0d32a8e79ff5c08d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67916 Malicious code in dzlanzsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6195a5cf2bf87f2782a45748138991607d234292fe8914919cac6ba63b1db9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...