MAL-2025-69758 Malicious code in original-indigo-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0a6bfd2e87b24b75151819764b3199c87b73a2b50425122a5260a018795039a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68548 Malicious code in glorious-aquamarine-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3199eb1102e7cdc6644a53af53841abdafbd88403f0b306755c2662060482348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69997 Malicious code in prickly-gold-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bab8807d09cdf9a0c3f44fc71a071968c90b944b4aad67327c00b6a17092e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68367 Malicious code in fluttering-plum-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548b0842b97696cb7f5d2440c50ef37fb49a213866dd48cd4914834f5a51557d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68226 Malicious code in familiar-copper-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29ae3b613c82e312d950614229f34aaf4e441a8a760d1869b5167e1c2767722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69519 Malicious code in mysterious-beige-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3147f255ade3d4f2310ed807661e33b84f6b7769b6be41647e1f7edb19e5a294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67816 Malicious code in disturbing-violet-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d00b1c818819653e9fba3a7e23746783671ab3166b943e27509f304f722b819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69399 Malicious code in miniature-teal-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f316cdb6c76ce9d19166a21723ef8cf5b36d6f53338d2f6b90f932c2ad9c9c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70776 Malicious code in splendid-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c441cce8c8559a6c47928ed6b8c23d21c1746c6c982dd2f2781c7c7374cb9ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-maroon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f64af68ad2f111c02fc4e3a3879163fbe06a1ae9cab25ade39d9c3f08d900f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden-tomato-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe8f40d5f2624bf92a3ecd8752e0a9f1a4e84f81261b88e7ccc4bda4647c4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual-tan-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f4656d88e72da89a3ca6f434794a88e00e3241a59124a27110e2a1a6260fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special-gold-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e1de95426e61bb34d06351360b4001c93cafa9c21cfe8fff9d1a2f0e3afd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-peach-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699d8093b280fd77e9ab23f5eecb84e83982b414c10e097da67269ec65ee9110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical-rose-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70df7f0d30c42570d2f3365cdb769d011e93d24dad89dfb18ccdeee5b89826ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating-tan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efaf1b39700249421c25fa74423c4ecfb6c489789f101dee9db15142f1dbbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic-white-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19af5c7eaf2e7c3b3d0b52dea964492775dfb5c15f7bec6134e217699c30ca5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-magenta-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a709c7f57027d6ae92987b6c8832bceaabbbddad725e86cf3764fb1d0af846f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-sapphire-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60edc243937646681faa70ffce2fc76d2b55de51cf4d0beb4bf24586a67f9650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...