MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70492 Malicious code in secondary-gray-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2bb70f9810123e004b0450c741277730a003dfb1052885ba3264abbdc4c185c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69238 Malicious code in lucky-lime-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67742340f3615c105d88c733b19ca0c186f5843335f10d893d0a43b0533567bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71088 Malicious code in testy-violet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25d400cc642c381645aec0ffd1ef6ed3aa3c3f3b029316ebbca2c6c49290051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68678 Malicious code in hilarious-violet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a16b002816f55f149b7f8cb4c9dd3b79f347b05387e7e5f6599961de1a183a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67203 Malicious code in civil-cyan-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721e66fa084d481db79f36b0c017f4fb8a58c530c184dfb88e96518636b67199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68910 Malicious code in inquisitive-coral-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91be5abd2cf841a896ec9f58b209ebc1c89202982c109684f33963f2579e70fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69531 Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69767 Malicious code in outdoor-maroon-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33262368c329847ad0488383264617a4631fe8079c77b6108d09f36d14791168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70246 Malicious code in redundant-brown-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9be99bdd1ccc2e80e692c7ba1c69a2e2632d1e1314feb8b68b8f9c33e1bfa97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68353 Malicious code in flactokun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b85cee2e5f8a448f2f2412672765798f1999096bbe8b672ab8a0b93b938fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68100 Malicious code in eventual-apricot-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce099cf74a88a4a22b74402f5144bccaef7affc7aa79cfec6316b6093340b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70428 Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-bakwan74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b98137eb1e599bc6f3840a9c20ecd9eb93ccf5e9ee5724d36ee3484873e164c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbf23b854ae5673eb1fbe4e129162c2dc2d803460f4a4ec35baecd7a90cc9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b98c013bbb82f15dcfeff2f213a4bd66e8716e8893c726a412d145196cd47cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tumis42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bc65f32b94b1324243bf93fe559e06fd99a069616b369e766b3849237ccdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tomat27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f23f0f8f86d25e70130848ab22e53ef98376275602f0ea05341ba9f820a41c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-moci57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fb2725e5b051a177db7f275bbcf71e2756e37c626a93b4191758913ce85d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-gulai37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca1e09ac3b39984ede93895432df45204c00ea31b12129b937c663938ed8e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...