MAL-2025-67956 Malicious code in efficient-jade-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4acb1e55471ef61f9b2bdca95310c4ba6c3c4c29a29e7f16c17c0fbf957f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-jade-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8a26fbc6ccf1a66847e19879f8728bf3d6052a5a4cc021b0c6fe84ac485ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-apricot-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14c260583f4f96d3ef0b407e9c3f42d430bab768a649e7db104f173fdcb0199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec448c54d1165ba593a79ca773cdd8a7bd390fc6ff8fc0ec189f90828d66876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical-bronze-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecaae9ab01aef6b0c03044389ffa42a8ed2bd955e3992dcd53915be371132863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfc6d3fae1d552b24e07e390f7ab003ab17e0faa6b357447f03bbcf0ad23c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-rose-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9212341074ae025932099d881479cfcd60c01ab4165d6e70d5aabe0acf7dc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate-purple-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6ad64269944692f8ccdcefd8420cb77d0ca0c418f3c9e9e23646c88c23414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real-gray-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2390c426d0250326a3f8133fe9b6ee6bb49fd589c5258bacda7ee01809e4e454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected-teal-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d09d9365876b2941294fc410dda4dc2b73000bc7fdef34fb63fd46272dc5528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d788a480e941f1b36b843708ab8ec0619ef2693bc8cc761317503301969f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant-coral-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6730a9a518989a00efef7cc6939e47deed3b2b31b7a5d1ddbb1ac93c2ec57e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67361 Malicious code in competitive-salmon-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0185e51b406405429ee641a996669d82f088383baa269ab237f7d5b8b2e1c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71474 Malicious code in vital-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245d42d0c0fde6a7dc606068cb1e51970c6450ffb25b89cca7780ac4c4e712d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66583 Malicious code in absolute-black-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607d913ff6bf21a8825746412b98c1a6c971946064f92486990e01762980858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69122 Malicious code in level-lavender-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a059bf1b158ab7631037037131b9bb21862314bd98cc50a98aac5a01eb9e104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70088 Malicious code in psychiatric-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c0703a818e5da695e0901e3026da9cdaac04dd0ae636e3bcca56dc9d639258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...