MAL-2025-71486 Malicious code in vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2c046c6598bf76b4d7e9ec14900a3850a0770c4b8d5d8d74690d3069a5dc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66679 Malicious code in advisory-emerald-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1a85f3a539513126cb7696ba6c1c970d9774e4c6366d656314ad578c5d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69904 Malicious code in plastic-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f204726225328f6cb1f2143efdce1a4f30d8a9b04d2c0c6306d36e08903b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70442 Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69238 Malicious code in lucky-lime-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67742340f3615c105d88c733b19ca0c186f5843335f10d893d0a43b0533567bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68684 Malicious code in historic-purple-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd4f6743c8f2eeb19d293a0518149d120c3145785ed8b89d8463d6f4766c508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68953 Malicious code in interesting-magenta-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35852c710354f1f9d000a925da8839bee1235db7a21e68203dd579392cea17f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67240 Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68668 Malicious code in high-maroon-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ebd30131856196426dc1efef35c046e54d0dc46f860f5525fde2b0713d0c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66873 Malicious code in attractive-violet-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5310dc84651e474da95552a9bce3efb22b3b5131de8404c8bdcc534b9204d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68687 Malicious code in historical-red-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b27e01f7f9c8659bc5760a37693d01949a45ae0d3c2c77d02a37333ebf3952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68510 Malicious code in genuine-salmon-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c08513caf509d1e88c70ec771b2d594afd96e10aa8c37678ff9167964070f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70872 Malicious code in strategic-lime-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55265498f9cd5c1198bb5eb954fb63ed37c9195ddca2b656aeb45d6f55817097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70305 Malicious code in religious-yellow-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e26e9e69dadbc1dcc38b29eb053cab96ce7afc3deca3f3597e2b8d04c0282d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69632 Malicious code in northern-amber-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7ccba46be897fafe5c7e950361a1aaa247bacdccea9c6b229b4ca3e5db14247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71418 Malicious code in vast-amaranth-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64734c0e9328fb183586a3c01f34e6422cc78e6042ec4afe7ca88a0d2f61dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...