MAL-2025-69985 Malicious code in present-copper-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601cc2294f6ab4a90ae3a9b6516b2f7cff77e65ccd5369bf256fc070cdab3359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67581 Malicious code in cultural-bronze-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93580d3fd559442e1e3aa2d3f3078b743513973c2fc1e57b838b472cb08b9341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious-cyan-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe6f7ea86be1f5e373776f02ace39b17aacc1e04c373ce38d89806551f847ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69064 Malicious code in large-scarlet-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6017ce7df242d231195866da3cab9491d600b67255f34d9f1bf361b3445b8245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70429 Malicious code in rubber-azure-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343944633cee6544b06e84a9b7ac47ad41b1262f073c98abc165e5be76490d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71008 Malicious code in suspicious-scarlet-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb4330431bea4e3578b88fa9f0742de52aef811a6150e8fd2ddd6362ab27d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal-fuchsia-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106e54722cb4014e4f59cf894ae992390cabe5dc238c395dec68e72385f4e942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative-plum-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4919757506f90a6d6e21e7d1e14f49efa1619acdb2169b8a0d0c6ddfd4593096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68644 Malicious code in harsh-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9033f4db009b0d91e40cfa1e8d0d0cdd97c92210dc83a4c23ff972c1d773b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69504 Malicious code in mushy-chocolate-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987b84d257a25254d21bf2ef814314447124a57e0cfdd1051b75ab7e555f9501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69844 Malicious code in patient-blush-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8193f291c5f49d0f968f5516df330a174b81c5c4124556ed729ba2664bf33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69713 Malicious code in olympic-cyan-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913eadcfd6246ff49a66ba9aac2284e091a190a85730e3aad1998a50237846bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67371 Malicious code in complex-gray-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf98bab76852457f1d78269a39f08f1dd4201542b66482c2e2d47d934fb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71097 Malicious code in theoretical-tomato-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f13070c18d0c734f09a1ef7a5eedb6f879c4ee189726f3733562081e34fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71413 Malicious code in varying-black-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2009a82de0281b69dd2bca9ca9457922a5fcbc565ed744175db5a280c703cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69422 Malicious code in misleading-blue-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3150b17eeb9981cc637f4c3b436830d564ba4f2d1e9321e05a290daab7fefaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68782 Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69759 Malicious code in orthodox-black-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13d274d795d8dae9a245d8ae1033e2fb4b67dd6ec22ba56cec62cd51229e920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67606 Malicious code in daily-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661810b736b38e5ed2217a324979ab4a371ec308692538c9505cd241a488d3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...