MAL-2025-68857 Malicious code in incredible-aqua-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142d3614849c3a63242c3a617cdb0caed927cc02a8e77de1763ecf08f0fb843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69626 Malicious code in noisy-rose-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468d6660cdf8ba3c3e44faeefd0221c45ac5d3ced050259728ffdc6e641f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68217 Malicious code in fair-salmon-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e78ace9d2352a0da514059741015645ff8966e951eaaafc211b39a6132dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultimate-ivory-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a99de23f38d879cbdb1345314d0e5457ecd20b701da8d8671a642285c8d978d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant-moccasin-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec3d41649b5e9b7e4dbed45b8351863b20a94e2a758d0e2d695607bea59eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67671 Malicious code in defensive-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5635a35573ffca90811fb73666f2b012a7a5aa25b05950bbcdd6c400c44f7155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68570 Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative-moccasin-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d9357cd3b173e26110bc01335c184b691aab1cf4b2aa28c4eeb7b8c381c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69985 Malicious code in present-copper-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601cc2294f6ab4a90ae3a9b6516b2f7cff77e65ccd5369bf256fc070cdab3359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-blush-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159bb978070ebdc42f2c9ae5c2ba0ee6df33fbc5dfa440fd2e6b414695272f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-turquoise-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda0837e1717c893d01c072d3a5deb3f4b10a76bbc4cd6e0e049a1c0b4116d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-blush-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbb4f7ed4371db5d697bf33e6ac6b94545283a8118d2b95a848e3f1aa6275b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate-olive-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1685a2b91e71eb22f4e1d2776b1b294924d99f8c8c7d3241996f248144b7285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68966 Malicious code in internal-azure-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333433ff810a17d1e7261d1a0a6e88d9eab8839c79850d4d548e80fcafe1fde4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71172 Malicious code in traditional-lime-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 197fceeb751f1f5379e3c8066475620e6b5284b497e91a28ee3def54a7481552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70486 Malicious code in scrawny-emerald-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bd8b04ba18f17f5ad122e8cca295214aa4a15dc1abf59d456017d57d60ed68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69490 Malicious code in muddy-cyan-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd16d86b1a9036af518bee0be057969d4fc210053feb513af7966041dddc45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...