MAL-2025-66704 Malicious code in aggressive-magenta-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c23a57b45f390648f83ce35cbaa37f6e384aff2d3b07b76423a8e31f0d14ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66739 Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68687 Malicious code in historical-red-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b27e01f7f9c8659bc5760a37693d01949a45ae0d3c2c77d02a37333ebf3952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66632 Malicious code in acute-ivory-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1394928ea949d83f07d691cd31a37dad34ce84eb7f838ccc2ce6bd4999782ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68047 Malicious code in enthusiastic-tomato-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e35e2dc983ea87210a60ebe7c84b0d86e482639d7e7b501c9fcd372b8164ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69781 Malicious code in outrageous-crimson-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e316ea03ac81c7e1dfd3523dcf00b64023c38ef69e7eb76d97082ef7c56589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66837 Malicious code in arnecx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0890fc873f87e37d5296c5f26e0e7d194277a2a589f0848e17850d7d4fcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71418 Malicious code in vast-amaranth-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64734c0e9328fb183586a3c01f34e6422cc78e6042ec4afe7ca88a0d2f61dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68208 Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70141 Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66873 Malicious code in attractive-violet-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5310dc84651e474da95552a9bce3efb22b3b5131de8404c8bdcc534b9204d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67750 Malicious code in different-coffee-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa81f9c14d6aff944c400d9139194ef32d9b1c268eec2c87b74cdf57f5616118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66679 Malicious code in advisory-emerald-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1a85f3a539513126cb7696ba6c1c970d9774e4c6366d656314ad578c5d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69629 Malicious code in normal-cyan-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb5f609caf52e546410eb31d954d6b07f9be422a3a71a1637f86b02f674ea0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70442 Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68953 Malicious code in interesting-magenta-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35852c710354f1f9d000a925da8839bee1235db7a21e68203dd579392cea17f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68927 Malicious code in integral-green-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2741f721690a7673d9a821f68a28d09272b673b1f1ed7c70be4f5cd90316c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...