MAL-2025-69971 Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69649 Malicious code in novel-moccasin-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b27c12fca7b06d3f0dac586cc4b7f3bd3c00a84680ea6ceadaeaf0c52c7b60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69403 Malicious code in minimum-cyan-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee89283559647380a1046505f02e277089fab5ff14451803bc856776f9ae676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67270 Malicious code in cold-yellow-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba0c8c0ef31de546b826e9a644184270d18cd0e8d297fb1659928192786480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69210 Malicious code in long-yellow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4380fdc0c59b0e6ec9eed42a7fa12eb2228be72f34ac94de3e169d650af7df05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68104 Malicious code in eventual-ivory-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2bd6399e0213e5ebd40b5fa2f03bd3f47613bf5aea11fd18db64b071919250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70955 Malicious code in super-peach-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9459407e4c096c765f48c9b702a6743072979bd911f20c1539d31fa21ada4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67787 Malicious code in distant-coral-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa775f2fc9bdcac13e8543a7305228ed4803521eb07029d18b10369c4f5c109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67209 Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66732 Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69026 Malicious code in junior-aquamarine-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5c25fbe848577565d1c230f54001690b5746be07642850110c0e731f8f807c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69434 Malicious code in missing-orange-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ad0f023e663bdb05ec7c31243516140dcab488c44066ca22e81b69d493db54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69306 Malicious code in marked-fuchsia-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db60ba6401dce1dcdcc8ee71a4f540a4beed61d9ac0d40150f944d067d986422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71091 Malicious code in then-red-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22f1a5fe98331be193a2517d96daa404c77c3a5e172d79174ccf68e8e0bd52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-scarlet-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390aa8ea602baee1811d74de0dba098de6181feccfcac319f0fa23b874dc3068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-magenta-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6750846f1d3fa02cf5fffb1d59a38ee0d63a00c530eea13a92ec8d82b7b5f25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern-brown-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce330f9d75ca66bd635afd62b64f2f94d82c38edd77f72930ed65e4db42d4e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce66c5ac0bee9a840c121fe807ea4a8265e2b056e5ac60d67a02503e3be6cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-cyan-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffbda65075b94448c200e0f2005d0490d765513593d20b41d3e54319783fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bizarre-bronze-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6338d85da11f00349292bf44cca72d7b26c498ce37ee16ae975f9bc83b85f9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...