MAL-2025-69985 Malicious code in present-copper-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601cc2294f6ab4a90ae3a9b6516b2f7cff77e65ccd5369bf256fc070cdab3359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-black-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c564ae7e2e35e2060d2ca9b296323609515215864bc3a6cb6b6f498983a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71732 Malicious code in yodelling-coral-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508578254beb55812a524287bfbd102141dc41488ea6dba0906f99885358f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69463 Malicious code in modest-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5dce31c2e34c15682e326e0dbc982d7cfab618ac1847be297962ef8f08b6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68674 Malicious code in hilarious-pink-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155923af21d337fdba1e19d1a2b035a2654985edb74149b0421fc494f431c242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-coral-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe22b3f8653ae7c9683ecbb49cca33aa42272237118c7285571e9cf68c6950d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid-harlequin-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2115edcfb9cfe7b022f939bdfe978a7c4d76d774b25ceca9948fbecc9995974e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still-emerald-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b42b0a42a07cc08d54a634d714c74665ff888711343966ebc407bbb30d1edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused-chocolate-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433d32e53fae7f694c649da21abbc18c6b40b1f590c1a91258d3b0e07549070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71079 Malicious code in terrible-blue-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c31d2f2f455e81c08b320b16525e825151809500f538ef68befd7c01c477b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70809 Malicious code in squealing-cyan-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3363b64e1891ec306ce92975a2fc4c55c5894c7c938834c0c40ce0fe64fce47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-scarlet-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e68e0abfa126ed9a00df5d880d8aa8c343dcd8561311ac2a621845546131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586de2e35af549d359f672e63416a8de610675d5b0654bf77b5da1d36683120b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71317 Malicious code in unknown-chocolate-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb54bf6dbeaa93dd04abf3f30e30c145bda62f4256c2dc00909d762468385812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69457 Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67090 Malicious code in bumpy-peach-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9086d8a078553ed2fc9ed9c6fa9b20b45c23276c060050b403cc24bec03b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67453 Malicious code in continuing-gold-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7b0345cc33889923925692a77ab6426b9f306c5e8e66bf8da37e7f418eb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...