MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68802 Malicious code in implicit-orange-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edda98ec0545f06e72ae32c79ec4f541b81837034de791396beca34b8d65d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68904 Malicious code in innocent-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b120a2836ea82ea14eb9049b98c411f50627106ebb1e127581bc24ee38bf03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71142 Malicious code in tiny-amaranth-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9063f345f407edf15ce0bca25c62dea86bd6c812c68c66d90eaf10ab640ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71700 Malicious code in yappy-fuchsia-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae00a9abff69e91b03facb109a5b60c165354dcc3959ccfef8855a99248dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70726 Malicious code in sorry-aquamarine-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f80e12d59762981a75a72dcffc8fd6b885219c3496fefdd7a8ab37fc7d88fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71422 Malicious code in vast-magenta-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f07028a9ccb5f65ccbf2c9f075769a86812bb3287abf016d756e4c316cc2456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71600 Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66731 Malicious code in alleged-amethyst-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc98614f0330f1b155a116a05748162262d4c16a399677268d6beea78157cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68954 Malicious code in interesting-yellow-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baf605dc0172666767e140b9aff0bd3d89cf7ee0b3d2a5316ead0c32bc4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70871 Malicious code in strategic-emerald-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518b134199237eaf5e1baabab61a32927cebfbcb3b66ca2443595a0318c6ad46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71782 Malicious code in zippy-aqua-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478f3cecff20e4fc185cb82ac7476fb68d395c32d4e125d7252dd4457dd347c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69340 Malicious code in meaningful-magenta-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfb8f5b4edb06fc6ced5ae9d3d3f2de1f0a5d3e231f1f31ec3d5f54c37e2c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67353 Malicious code in compatible-aqua-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ddff50ac37b1d4ca212d4388c8e24af0fc8cb7b3f0044ca24975dbafc47461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71341 Malicious code in unusual-lime-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99994ecd22225f62177514f5bb51f8adbd96da05fd6248b8ebffa5a0323e406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69237 Malicious code in lucky-blue-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5b150fe3736201bb9e00c275e0fb956ba6629240baa502e0c14810ca541646 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71519 Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69518 Malicious code in mutual-tomato-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 771d66fbf6fcd72ddc3198e742cb9c5526a336ff4af02f2bfee042a78d03c8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68061 Malicious code in environmental-coffee-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a8ac83760e669b8f548b06d3ed863f1fb78ee7ae70fa200ddb4a1cf87143d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...