MAL-2025-68544 Malicious code in global-harlequin-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fe6a7743feeb13dfdc8001ce18599bd9fe27237be4b904d0ddaaaae130dbef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69678 Malicious code in obnoxious-blush-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad78de8a1e68cc2738c87b1969d8fbbb8b9767a1b21c5c84d962c800d2072844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71705 Malicious code in yawning-green-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52aec9f67ce039bf09f84f52da06466460c8153560c330ebb96e914dcb0a39f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68624 Malicious code in handicapped-amber-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74275bb43e600994eba90a00faacd7ece9a298979a3fbd3d186de95ac52e9b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68803 Malicious code in implicit-white-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91694c4a9afae038f8dc91888b8cd3c18dd223c7a9383ec6a4ee247df1ef149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68528 Malicious code in glad-maroon-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223b726237ce1ea3ffcc80a32aa796ed9ce6ce12bd37b40a6c219f8945d4a649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66879 Malicious code in automatic-gold-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b70a8e08686a79cdfde4285355236e09c76078b2852300d9ef6afb9b1077989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70733 Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69670 Malicious code in objective-crimson-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340228612a7f42a4040459727fcb3d327eeb92bf742d4dde99bfbb9684241cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70675 Malicious code in slow-blue-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6a6593e38a953c780abf4b32e6b24c5ac37c16fba6eb8fcb091e1f01966ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66604 Malicious code in acceptable-lime-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a572d7f04fd0a7fe7aa940662fdd060a0d189c46b1a8641a80f7bd02ea325c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68901 Malicious code in inner-coffee-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb43827b00821192d87d2a4d4845c49c20d444a2340c9207a68c747d14b9e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67256 Malicious code in coastal-salmon-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2c4886b997e48a2809c6ca9be48de34e082123b1dfe41fbbaa54846440754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69635 Malicious code in northern-fuchsia-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b866ee4bdc32a8fb593cfff25d650cd7471c8113ef86d28f5af1946db07289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66582 Malicious code in absolute-beige-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7c943f078cae1adb993f1f5a7713867a80b36e4cce4e521fde63b403ffbd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69501 Malicious code in multiple-moccasin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ca6c14764f9e4a5de0f6478dc1f4c564375a16f252c32483750acaf4316c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70974 Malicious code in supposed-violet-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716a517adacdb1b1bc7bad95b18ad4aa10f700a7c568a3e7f430c18344f367d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68850 Malicious code in increasing-cyan-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a68ae0fc844cc3bcdf86a7972e5a30f74beb46f9dbd9bf05e84124af3c48a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68674 Malicious code in hilarious-pink-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155923af21d337fdba1e19d1a2b035a2654985edb74149b0421fc494f431c242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...