MAL-2025-70343 Malicious code in resident-maroon-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc784fb99daf3641bc22f693a653dc95bb73817b95c3802e746a4006b8a91ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69077 Malicious code in leading-green-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c4672b4626690401117fe6fdac903a5be244b1679a2bd09b81972b56a6eb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71656 Malicious code in wrong-lime-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909de9319a8105f536fddb641b6ddb587708a9cc3785cfa30f848fb65353754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68166 Malicious code in expected-coral-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe22b3f8653ae7c9683ecbb49cca33aa42272237118c7285571e9cf68c6950d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67716 Malicious code in dependent-black-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e81c883be00c141542889518096c330e3efeb5bfe160578795164a3bb73037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69055 Malicious code in known-lime-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573cba47d4497d24a67d65a7d66be9acf1c72597dde8ac48fb9394f896958640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70146 Malicious code in quixotic-cyan-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b2250d1a058a8941290f3c25f2ae9082763188d34dc023e793d26cbf672c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69123 Malicious code in level-sapphire-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60edc243937646681faa70ffce2fc76d2b55de51cf4d0beb4bf24586a67f9650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66565 Malicious code in @bipyruss/radiantriddle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb7b7af17b7b59d66edaadd9aa13195e7886b7e23905dc09eda5ccc360d2e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69998 Malicious code in primary-coral-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960fe0a29d9477638d2a90cc3146a0571d7097943865036f4d909f6b13dbe54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69028 Malicious code in just-cyan-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd5bd077c35cbcce3bc86744dbfa412196b4a11e95402eb66d69a580f69698e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67878 Malicious code in dry-aqua-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0981ddd42f2082dcd5be27dcdade830f3ad6145962ca78a27d85a203a895b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66699 Malicious code in aggregate-scarlet-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d846449a1c1702a5f064daeaf0f69bc84a1e26df0093b3d4df912735d48a2a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69842 Malicious code in past-olive-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede04629d7df5e6f92566df4e78f2786b661bf06b897accd4826fb99383fc717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71390 Malicious code in vague-salmon-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e504a24d9bc20da70d01c33d8f365efdb5c29f5d8bfd71334309f5eb6ca44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70838 Malicious code in steep-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c52e458ca6767e43ea7f7472d08355c5c9b6b54caa3307e49b3cba277b4155e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-violet-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7702b9c890b216faee7ded7a3a49c4435b00264865d5a045cf206468c57b11c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable-yellow-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9baf9abaf76efb60a172f501918a23d6a7648f648a1d24c7e2fbc79109da62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-coffee-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb90ee11df746a438c176d5b5efd0a07a2fb2c575729cd3d52afa6fe844a6e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...