MAL-2025-68449 Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71440 Malicious code in very-salmon-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f978513608076b5481806fe9bcc24bfb5188f4c10dba9b44c175805234f1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67682 Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70774 Malicious code in spiritual-scarlet-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc977f87ab9dfa5659ad5788efcb026e0cbc95e29c00b0f6c84044daa40158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71118 Malicious code in thorough-amaranth-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc8e26b15f41fc6c4e8de51885d81bb0ed8995816202a678a779e3443b7540f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67973 Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67163 Malicious code in chemical-aquamarine-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35588d3e0469671c3e5718a6152adfe84acdea852d870378d85c16cb747a4ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69915 Malicious code in poised-emerald-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469b356b3cd49dce05cf21520d33a3f64dff14418a775ed797d6e44d7aaaf747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69339 Malicious code in meaningful-jade-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149343eb0d5b7ebd78a8b000b930cf8f24bbb82ce46e5e4ed5007e4c8f53286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68950 Malicious code in interested-yellow-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe4c85028d67bc884a414511c71d576588853c81295bc7508acec70d97400e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69699 Malicious code in official-blush-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed817d7c6a13c26693826e51416b6a0cd604e0b2c28fb59e54c165f5972edde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70288 Malicious code in reliable-bronze-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67477320dd2c845859b97365f5cfeec24ed1a51d06462ef1d9540cb09b672790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69578 Malicious code in nearby-chocolate-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8821e383e28d568e13ee56a7fc7326465188058e2dbc87278fb1483bc6b8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67097 Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69875 Malicious code in persistent-white-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443d1136148155802d5fcdad0fac7678a03c4cca7c360900cd41737b7416bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest-plum-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bd93afa0394e434a29d5e343920bf1708ab345fb5304c470630d834f8d5117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-brown-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e6039268d6e5c444960641d555d544106ccc43478b9dd199dd86c9c2373b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...