MAL-2025-70248 Malicious code in redundant-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657893452dd9ad60bea7f7ab116233f331a1aa4bb05282aafcaf1316178bfd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71329 Malicious code in unnecessary-scarlet-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4730106025f1266dc8d750042ca099737e9af7e23bd1d83b9c84c8ad196c8d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68897 Malicious code in initial-tomato-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9371a6a94c80da6104b4cbc63e4c3c7c8285bbfade217a535b1918a5b6ab36cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68401 Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70348 Malicious code in residential-azure-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa26df1a9eb1611e389e60edf720a3d52d7e6a39d921184b9054fa15ab9242f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-gold-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c515eddc135532b4f81f7a09a9000a71c33defed78c1fda423db1afa566b291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70139 Malicious code in quickest-silver-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c585e538187ea0fef65963f6a2af96cdba88b14168c3e07c36f49fc5d5f86d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68207 Malicious code in exuberant-lavender-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d3c5dea5a58399e0cd9fc5bf0d97d3d3c8f83d6702c46ff0dc42cf587de595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67250 Malicious code in clumsy-maroon-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a74b16c48751dd91ee315fc8ba82366284a4a454ff04e12837ce63102b2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69557 Malicious code in naughty-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081f50c8f9f1529a81c2392169bbf4c9dd70dc82eebbdabeb3b11fa61371295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66744 Malicious code in allied-moccasin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de37e35c7eefee0d4b16c8347a56765021498806a24172680838e810f29f8c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69999 Malicious code in primary-green-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c628f0dd3c06d481f70ad0d075c7b928910b99016719bc7109752d6b5952e539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70532 Malicious code in sensible-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325d56ae75be39c05ef47f3d087a3582d4a13aa3374373b6c06d044ed48a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66875 Malicious code in automatic-brown-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488e274056b76233e7f5ae4cb7dd87a2b693e95f881453dc8bf1d2cbac0d3b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70923 Malicious code in successful-amaranth-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302f5637ca31426581ca9f9346e52700b193881e62f96e7b07c5db81e19d2eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70892 Malicious code in structural-aqua-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585d14ec5ba0c3539cb50596d26d5d28a6cd989477deea44ab016edb5d438157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71550 Malicious code in western-azure-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c566e7c2fc66013bef54176f1fca933930917c7d211b0199d53b586d18a03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69400 Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67904 Malicious code in dutch-aqua-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4332c39d396c4c83fdcad3e912bb7eef53582c4475ff775b2adea5faad2e6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67342 Malicious code in compact-maroon-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909a58b99ce334b90d44a602b9d9f08389a8b8b22443e97914e8ba2ef29a4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...