MAL-2025-69263 Malicious code in main-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973c9bcef0495fed11524b4d8ce2b8c43717c7bab6ef874b81a526bcc5a7ec52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66840 Malicious code in arrogant-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b6c767d5417558bc30feaf7299a5b8aa918a1b3974c20fa91c2db7f8c1f794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69931 Malicious code in popular-purple-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e31a617872f336638e1b362e6f9b011f927aa8e677f5e30be9e54046a9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70769 Malicious code in spiritual-amber-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4f5d94082d509532e8f71e20e1cd25eda9ff05a84379206bc281175df88437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67503 Malicious code in correct-brown-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba8aabe183b5c7db186d824cda15d67d593aaf061f0e717f46f98d2807150a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67189 Malicious code in chubby-gray-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e9bb5fb61907ef6fbf7a1570c87e18dc26d07c55189767561aaa3507c4ef26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68499 Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71497 Malicious code in voiceless-beige-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d271aaab1f2c710ebe4ab5063401bb9e0db552d40ba4965cee3a5db0311c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69270 Malicious code in major-moccasin-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1a954d0fd8f4232efe19c45e9c24fa5f09d089c3fbae09ffa04c7c00a1ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69005 Malicious code in jealous-pink-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af975233e1b45f4cc58624b54d559066eecdcc7838f0f1e1cfcd1a77d25eac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71306 Malicious code in united-blush-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9a6095fa00c3e180e7328d85cca782eb474a12ec8c5aa558c8f0f45dbf55e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67672 Malicious code in defensive-purple-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad86837ea4129c2d11fb21af600ef2be7a665093687ed76e93781772a9314e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67021 Malicious code in bold-brown-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299a9c72879f97febb2e0e99cfc9672a065dddcdc8bd89c605588b5b75968e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66796 Malicious code in anonymous-rose-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d6d0e18cdee45c51e2fcd1e55a045f9e202224d05377f3b2c4c44c725eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68870 Malicious code in individual-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f164af61dc4ba6a5ace4c58a383ad84235ce221a763ebf189f89783d25299d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66860 Malicious code in assistant-apricot-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de5fc63df923997f2b03329dd326e59736473c52fa07ea8f5a013dc9ba0cd925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69932 Malicious code in popular-scarlet-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f9f354cad870277c609953028f91db6488e3a8175d45db9d32a13821158154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...