MAL-2025-71442 Malicious code in vicarious-chocolate-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a833bead0cc4cf135bf30e46c2d0a69c42d2cce9203d138a1abc50fd9471b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71122 Malicious code in thorough-sapphire-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100afd0a6c7b2174b674b1379cc1e9d95d18088d20eec9eb512a8513d2b9b075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71095 Malicious code in theoretical-ivory-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599224aadd0a6283bd4798ebbaa9185df72af0a0d51f4815c25e22bb4c38549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68014 Malicious code in emotional-scarlet-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be183664de7984f6da22a61a60dec3c2b55b790c6c2ac735fdbdadb56dda56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71010 Malicious code in sweet-amber-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083301a7d4e1e987d4d78a77ac69cebd9883ff43b3b2d5f79bf8d24ab36a56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68182 Malicious code in explicit-lavender-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f04bf2886cca834220e14b0e33d15dd723cc3f8155629f7546dd2056f7b5734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71508 Malicious code in vulnerable-cyan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dde09e4f2658c23d35c555d91b777541f2c6a963bc2d9ba3d496c6d004c5924f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67537 Malicious code in creepy-tan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1d14821eae2cc270a167f7bcf225eda72a84e235776f7fbdf1cb162b36d412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67009 Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68345 Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71138 Malicious code in tight-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b667714801dbd50a93162fdcc91eb405474a4a7dcded20178ceb63c415a896e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68168 Malicious code in expected-silver-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445a257feac6823453ea3c2e51be3484a514bd08161ff1c59b22e83a4e4c1397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67645 Malicious code in decent-chocolate-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0fec97b6603182d5bb6b2ed5d0094bb25bbf636b4fd166eb45751ac8aed98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...