MAL-2025-69046 Malicious code in key-yellow-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68088 Malicious code in estimated-silver-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca538727513275ab8e4fed8ab55a50581ef0beab8c9070af48f9001eaa5455d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71102 Malicious code in thick-blush-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e7f22ffc7eb1f8bb057285924ccebd99dc41765eadfeb30c0bf751ce37087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68385 Malicious code in foolish-olive-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320d3aa74b61345ad421bc77418c63ff0f1faeafd19c20d21b99f235f205fcb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist-green-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902c7d429b0286700edf5a3c0980535569b876195f1dd991197ee4c9369ef47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71394 Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69367 Malicious code in mere-beige-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a4bc64185d18d8bac0d364207516154765a58df42258dde0b4a9c1521d6adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69626 Malicious code in noisy-rose-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468d6660cdf8ba3c3e44faeefd0221c45ac5d3ced050259728ffdc6e641f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68217 Malicious code in fair-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e78ace9d2352a0da514059741015645ff8966e951eaaafc211b39a6132dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68857 Malicious code in incredible-aqua-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142d3614849c3a63242c3a617cdb0caed927cc02a8e77de1763ecf08f0fb843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory-lavender-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daea7c3a376f1fd657482c86f3dfa492571788ae713e6daea507e51c6fa5d83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyeonhau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c827a02789b20087042259dfc2637e7c37b55e9832731d54ff668303ccac3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70958 Malicious code in superb-blue-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11662f2132569d9ce73869013df64003ee0284d624126ab3dcdd0b412eb2772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight-bronze-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d9d4835088800f116ab520a9931b775d9a6802ed21681479dbaaa5bab11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...