MAL-2025-67067 Malicious code in bright-cyan-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e624eb7541389ca5048b028459307b1e998c0bdcc290fda59e290b5083c63662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70630 Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68168 Malicious code in expected-silver-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445a257feac6823453ea3c2e51be3484a514bd08161ff1c59b22e83a4e4c1397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68842 Malicious code in inclined-aqua-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cad7fa729c46e21373efb287989fae102c4a3ad497fc43802855e7ed4f3d8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69468 Malicious code in molecular-cyan-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887acad8a96536df262fd7f8e14b644c8b7e09db984fa16467361682d8d46e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70098 Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69067 Malicious code in late-maroon-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1952bc3a6b79bbb9d86e49431a8e8938b816a3256f5b9b2ff21f8a63fdcfec8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71146 Malicious code in tiny-tan-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f843901419c246b41964318f8192499b71fe4b80d89f5dd2f4fd00eea35c402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70313 Malicious code in remaining-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87895d93af91085c3d8940ca4c9cf5771d7a8dec672aafa47b2ab431be0f58df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary-emerald-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1608b22b8b23eee95932386aa0cbda88b0fb323f5186e726d3c5bdbadd64f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69876 Malicious code in personal-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f16724ef8bdd0de6f60651410638b35dd45cdf0339149946bfc139abcdf2cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71519 Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69444 Malicious code in mixed-salmon-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492e1261a398828bcdfbe71f1c4d320a266eb72b8de45c40932b043c50700d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70765 Malicious code in spicy-rose-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36b2f8879c9e35102e6927f0666f5cb449516fa714b607c068f964f0062a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67741 Malicious code in developed-amethyst-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b1cccc4e10dc3fe415a27aa22285a79ddccb3a1868f2de2b66e2844cb4ea40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69057 Malicious code in known-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d18e75a9683d78429e348578752801551565b317e89e33709163ce0970ff074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71621 Malicious code in wooden-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8447e5e3c56fca9d4f014b4556d4f9d12c77f22038738044de77fc3ce1e23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68605 Malicious code in growing-olive-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c664207d9020ca291b543eb46e364486ca2f5556fcb0019a877e60e914b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...