MAL-2025-70809 Malicious code in squealing-cyan-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3363b64e1891ec306ce92975a2fc4c55c5894c7c938834c0c40ce0fe64fce47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70880 Malicious code in strict-pink-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ad0614a731a49217e438755be383bf6646bcfd03d610c40b9ae189f48e89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66972 Malicious code in biological-indigo-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e1e4274dd6adfa1d5189e5cef993caeeef0a8884a19c11b2d8d14ba8b24a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71317 Malicious code in unknown-chocolate-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb54bf6dbeaa93dd04abf3f30e30c145bda62f4256c2dc00909d762468385812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant-moccasin-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec3d41649b5e9b7e4dbed45b8351863b20a94e2a758d0e2d695607bea59eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-black-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c564ae7e2e35e2060d2ca9b296323609515215864bc3a6cb6b6f498983a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-coffee-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bad0075af3e7603746c86b2b4696690b78b8d8e2abafd23efbcf79ec4c301f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-coral-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0379814a47f9dbc8e639437f8e5f06f875446464c5c017b14d1917eda7f321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid-harlequin-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2115edcfb9cfe7b022f939bdfe978a7c4d76d774b25ceca9948fbecc9995974e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-turquoise-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda0837e1717c893d01c072d3a5deb3f4b10a76bbc4cd6e0e049a1c0b4116d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only-aquamarine-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1795dafda0807ea826924644cd2f74f7c9a48f29586d30943ef0c28a353bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-amethyst-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fe6c761c83ceda4baba3365f9d43e8d701ac2d4d0537e76aacba762a8641a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-scarlet-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e68e0abfa126ed9a00df5d880d8aa8c343dcd8561311ac2a621845546131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-chocolate-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c82b115c360a1f7de43ad1ce5cd3ccdeeac6934c7982fd563be72885ad5ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-maroon-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273835fd080d168d7f0937821104a004ea5cd9a41bc3a4ba145e29bef059c4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...