MAL-2025-70068 Malicious code in proposed-gold-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8068985fcda1c305f46bbe863a6296ba79dbb09da3d1859e92aa9e1f40f3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71476 Malicious code in vitreous-amber-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564a5f5b31ee732008963b6f231852436b5ab720412d97b636396f481f2b1853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71576 Malicious code in wide-gray-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f9f46ab17a8725e6c2a214416a6503e882a9727e0bf0129ba42a11edd9337f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68014 Malicious code in emotional-scarlet-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be183664de7984f6da22a61a60dec3c2b55b790c6c2ac735fdbdadb56dda56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67340 Malicious code in compact-green-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c715dcbad1e86b4bbd8fb7263722919b92e8fea2085f1565b84b2789190e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67247 Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67531 Malicious code in creative-black-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8620c6bd3e7e30865fd6023818cb2bfd7156bdb1e6769ec4a170ea50f3c388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71508 Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68584 Malicious code in great-aqua-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeea86226189671bb1dbbdb9b0c46a7591eb3415b02b2220634497f45d6ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67544 Malicious code in critical-blush-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c6548cbc44347102c96058b1f1e8f44b997c1fb933cfa099da75e203569d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67219 Malicious code in clear-crimson-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57d5836e71984395d838b1da38fb7d3df74ce16584ef7769b10537ec0000f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68265 Malicious code in fast-sapphire-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15afb2b26b47bc21221d9a950aad20c10461ec796cf8b6e7ae7633ba452d3237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68050 Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70941 Malicious code in sufficient-crimson-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dce041b106780ea5890bb580c34e9bf9075288038ec16cc1bc6709fe6fee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70313 Malicious code in remaining-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87895d93af91085c3d8940ca4c9cf5771d7a8dec672aafa47b2ab431be0f58df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...