MAL-2025-67782 Malicious code in disastrous-rose-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23b8dedb85f002c2bb2aec627314c41a8d7d6cdacf915aa6d60f94b13220adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68169 Malicious code in expensive-coffee-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01112b0d40fe8a0b39ca8665341bf05b2211ed8444fba4b106ddf3bf5931c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70722 Malicious code in sore-lime-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c06268a8beae1efe9ba8bd2e59cf4950320241f1b004453fb1d90d07cec7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70866 Malicious code in straightforward-chocolate-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc9c58bcd54d991b1128adbbfa1ff03885b77bd950139998dc0d02e6524ff61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67492 Malicious code in cooperative-white-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d241bf420254d41ad2053537a60bf4e96cbfcc1237d0f8106723190a66de56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71519 Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68842 Malicious code in inclined-aqua-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cad7fa729c46e21373efb287989fae102c4a3ad497fc43802855e7ed4f3d8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71099 Malicious code in theorhy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15d11789092dac8ac08e646da260e8fef749f90da1e550d356cc8709d0d6766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71032 Malicious code in systematic-turquoise-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5189f884cfe7df5c9d999ab89b0f5c060e8a4a3deac4ecffc091266bdba9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69444 Malicious code in mixed-salmon-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1261a398828bcdfbe71f1c4d320a266eb72b8de45c40932b043c50700d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68862 Malicious code in indicia1628 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce43959cf5abed9e14f4642e48e04e60bef95a21fb8100e7c26ca361dc7c6c6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71742 Malicious code in youthful-black-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fb39167332bdcc8edd883c1ad7902c38cf08fb61b6c6437f2e8488d935168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599a58142aff6aef2b7503d2b238da2f3952f0c4019fb4eda35580b8d37d5891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-orange-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c681d94454b32eedc345843c9a224d179a8e8d61279f4ece84085a3503b6f21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sowravyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf552059b71a4919fee3126b1563bb0b026350863c16f8f3a08d0950ad17607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed-turquoise-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68508e16004b4804b6330aff20ca031404434bc9b0893a2aa72d53d85826535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-coral-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1583c0be87b4f163e8a941fd299b18d6ee90cb755d084f95cbdf33134d5fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-chocolate-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe06d7d2fd77bfbc212d4bda7dd9be573c2157e262482554e13115ebfdecd90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...