MAL-2025-69612 Malicious code in new-crimson-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e44713ae9028c1c614bc0be670a9821af15234eb187046dde60d420deca9a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67754 Malicious code in difficult-turquoise-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c3364341e8864a47d15cee7b7842ed57e7bc5c54c2d824563fdc1c47eb67c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-aquamarine-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e7e073d65129fe8ad41b792f03bb11d974f0c83148c7319403b3a8a3c3d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-coffee-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f0acfc6132b8528998fb886d4413ce25343580263ed594e66e9ba714bacd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-lavender-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d1e1f103a4c659dfc3629a9f84ec397470f31f3ef3dc985c6b1172a2607b350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime-red-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9898b690d0234d89ac0595780bda268eedf8688f63afb98489aca9ae63480c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective-amethyst-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0c65e117306be60ddecd607f8537dc81cf1824f1dfa79a22fe45e8ea2c29e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remote-azure-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750d1a0a08d275502ced38fa636a131517f9c0e269ba3f489eee3c9239cb0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69141 Malicious code in liberal-lime-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb06f9883a5f5cd72f06ebfab4439b5b2ddfca984268e70bf1954798c56b4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69153 Malicious code in likely-brown-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b70e58c93cd325a4d1b1bceece71b074cca507ddd28eef86b8ceea0db4c23ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71606 Malicious code in wispy-green-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19975d8f0a4cfe353cce3eb88060e7cb2f5da670f7f632fba225a21187ae8170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66822 Malicious code in appropriate-purple-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe6ad64269944692f8ccdcefd8420cb77d0ca0c418f3c9e9e23646c88c23414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67780 Malicious code in disastrous-aquamarine-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccef3feaa0399327be4eb1abb8661edd4f5910272acfadbceee5a3bb2b59a7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70098 Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-sambel87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18ebc1ece91f567fbc04e9edc4b5ac488ded081446bcaf29da692af54f3e5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62066 Malicious code in bella-gepuk54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ad4ff0b16b840eed6020885fa353e7882a1c6c35932fdde3871e82c315cc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...