MAL-2025-67253 Malicious code in coastal-amethyst-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defff1fb09bc6dbacacca8335ca78b40236f8f5bd8ca59760de05e9925bb2ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66987 Malicious code in blank-pink-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e294bf7f2c1281d9bca42fd62bde3e62010e97e4693b6f66656bf9d46a85f6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67744 Malicious code in developed-scarlet-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4daed6fe16a84ca34f95cb54b40a1019dca03b0b278b4ac4a12fbc86d2e59ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67559 Malicious code in crowded-green-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f4f64f022ceacad80862409746e04301296351dab5da5fdb6dbabec87eec76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69205 Malicious code in lonely-green-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0563bf3601a775cf12681d51ac470d8c672b99159193c45bdb5716344dba07b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68972 Malicious code in intimate-blue-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41229cad2f31760972ff92023aa21fac08fccefc3b0cb45f85a6d40dba1e017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67260 Malicious code in coherent-olive-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e088e308a9b81723feb8e759c3aee7c0d5c962a731cfe9cade31c35765473da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69354 Malicious code in medieval-turquoise-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed456c822545adf88726a720cafc11d94c90ef3a68435a7b376048b5df359c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69669 Malicious code in objective-coffee-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723a2100c4ffee881ca605634382d1561b909db72ce4f270fbc4c1c6b98dd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71743 Malicious code in youthful-brown-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d90d4ffe34bbd1b486c2792fec4bd6829d724d030fd636092ff7e147e0068f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67841 Malicious code in dominant-rose-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856d464e7e6dc5f351612eea466e6dd6a0a33014a05b895b94b5f5c54bbcafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68225 Malicious code in familiar-chocolate-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c949266125c77f21e20a48a1b5432677b17e8c8475aa4bd7d3ade41490a236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71624 Malicious code in wooden-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77611270ee654474b8543db2bf655cd8059fedd14675e685f9785f14269f24a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67338 Malicious code in compact-blue-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f87e1eac2ed4f3288ab6975861c89eab1c22abc554ecba38edf19e0874ddaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67552 Malicious code in crooked-fuchsia-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2674798ae8d454c04ca54600a82ddb297b30bb147d68d80fe5e480516d5638c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70707 Malicious code in soft-violet-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b40a4d69aba395ceacd4ede4027eba92316f86a4da34d48027a6f7ad063e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67607 Malicious code in daily-fuchsia-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91366efdc7ad5ece971225049a05537c61ab373858196fbc90fee907803dd2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70769 Malicious code in spiritual-amber-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4f5d94082d509532e8f71e20e1cd25eda9ff05a84379206bc281175df88437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...