MAL-2025-68432 Malicious code in fresh-coral-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914992543a277b392e6bf5d214a2822aad5a351195d06131cfdb15f7df43a845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67887 Malicious code in dual-olive-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc5601580a5baf1be4b7027a94a748da9bfd5c788033fe8be17a9c95cc077ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68316 Malicious code in fierce-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e5cc50256b998c149693e2bd90761f604b6be555fe4d976e50edf52cd2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70463 Malicious code in satisfactory-scarlet-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfadf2cfc2445e713d1794cdb1c4fd9f7a71717e2ca7d499804e98924b25c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67993 Malicious code in electronic-coffee-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb106ce8f56c4b1162417acaa0e5c33edc18c62aeedf25679d22018ea0cc36eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68919 Malicious code in insufficient-jade-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 811e8224e7f8bf251481b7386526a1dcc03abd83f30e3e4c891f5f99e37f84c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68871 Malicious code in individual-turquoise-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8226e46272b8ed4af196c8261f5b61f3e2206c5b4a1ecca1dd2c5c9beb6430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69160 Malicious code in lilosyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bda558a57086f251e9ad10bd499cadaa451759ac006c47f433f9e9820fda42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68365 Malicious code in fluffy-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddad31e43e3421d51fe647897902d78cdebb744104f2cc4f9b48628c9b52a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70329 Malicious code in representative-cyan-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d497630b1971587eeb2edf2533f84f9ee0d070332f881fd6347e92790fcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66747 Malicious code in alone-amber-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ab0c8c52b9aa55e08d1733ce83ac2d63379b41263facb0a1258144ae377cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71548 Malicious code in well-purple-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653b4b90182dbb8afea8ba5945a1a93986f37217edb0ac46346a825dd9345dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71272 Malicious code in uneven-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f959d91d1a8eb5ba699e08015ff07e028c01da263cb6af146d0ab36c25e51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68959 Malicious code in interior-chocolate-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b63396d06e20fd598cecdef9224194216f88742e716712ec4ab2e9927606d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68502 Malicious code in gay-pink-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb2f646e8f9b3310aa3c575d03016bef4c8abd26469fe4134bcf0692ba1dfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69004 Malicious code in jealous-olive-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad385b8f645fe1c767b20dc605ebbb7ef0785291e7669ef10c554ba42369ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69321 Malicious code in marxist-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29a56b90de9201432562ccf576df4d0e8613cc9eac00f9b8b0b1155282dd591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68127 Malicious code in evolutionary-yellow-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2fd9c0b09d88a32452374dc34b16b8852c105d6f7f7573b5873b062a297328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68654 Malicious code in healthy-tan-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa311d53a401f8027d4e7651de65399fc740db97240403e75f909d7884e4c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...