MAL-2025-70019 Malicious code in prior-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9d691386da07ae5e78ca6a01edeb6a837a1ea790d4948b4fc32103b12e7088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67882 Malicious code in dry-lime-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd949be01fec21c88fa5dc61ce98139836b5a7469034cdd62eea5f4aaadadaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67637 Malicious code in deafening-rose-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8663bc5037b5a5700974e2fd4832ced2ae701c52be73c19e02b0ca64fabccaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67139 Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71644 Malicious code in worthwhile-magenta-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5dce3d78ebe628ab22539b9bd823176f57a42c6fda3f006c8f7a571020c0c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68562 Malicious code in gorgeous-lime-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bff2ce5f7ab0d43c9cc53b3a31d48522a37ad6ade9c9a5c41008848f62306a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70415 Malicious code in romantic-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46116023bbb1ed0de03932f05f26a8fc207cf208789f3435fbe88d71b7b7381e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67830 Malicious code in dizzy-red-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c278efb1938931db7cb3a47b17225a63a0c1dc244458234c2f37e1fd1c4fef2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71610 Malicious code in witty-coral-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe79fee1442224d1cdfe1f703fb417ed93335d0c2288732ec83a64173fd1acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67172 Malicious code in chilly-pink-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143bd4a400ccc213851ffed138a947c0431295fb5c037407339eb7aa2e2cf8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66849 Malicious code in artistic-orange-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d831a295a4c7643c36b4eb34f282dcb112204bd68f776a45529ede0c68a51a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70548 Malicious code in sexual-beige-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0bb26421d89f07d8b0795b98c1aab8569edf6256d1f753680af4a3bce62acbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67137 Malicious code in certain-plum-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93541c3718afd1725034bc803bc16c84f81ff6c69c6fc842a7b252895edc5503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67279 Malicious code in colonial-fuchsia-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662a0a8c9007c727438c85e0fe7387b7819bd11b13cc7c3c27ad68cc1382d4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70906 Malicious code in subjective-sapphire-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0f9664f27f7cb06ae899154704a7c3e9bc2910086231813fea7354ec0779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70329 Malicious code in representative-cyan-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d497630b1971587eeb2edf2533f84f9ee0d070332f881fd6347e92790fcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71502 Malicious code in voluntary-beige-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f082e2bcb9ea5646123c3590e6776afc2647ca1590295bfd4912d218a918f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71239 Malicious code in unchanged-amaranth-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac9f6914f933b76e152088b94448fe2f33b87f806ab67acc80a6ab790ebb859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66895 Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70107 Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...