MAL-2025-71570 Malicious code in whole-purple-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 460f4e040742f7776bcb9f4905a647fd6a61871fae4a0085a8494e5f2d57dbf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66700 Malicious code in aggressive-chocolate-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece94d09f87ed47b7aab12159e5ccc37d8feae1c28a6da7c40cd19a774254722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69322 Malicious code in mass-plum-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c150a916bc8e026094eb584ae62e81f7c72fd45faa1b7940e731af5936b540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69445 Malicious code in miyool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa95da6580df72388a2b491f52c1756c733e7383660348c461a4a412f66ace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70634 Malicious code in simple-purple-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5692a08de852c68c3a0e4375acdcf1665c25b39a9d643b0e191fda06b548f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67582 Malicious code in cultural-emerald-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c86ccedf789381c57cff1c4151372c07d21f9b1ee4be2c10c703773a8ecda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67174 Malicious code in chosen-cyan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cd2fae4f54a03ec32a8320921731f7c0b454d6ddf2fa1650300b75081df8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-apricot-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e43c86c1c4c0c72df8778635468c857f119e12fa5bab6f5aae6151f1d04e086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written-amaranth-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e93bbad3b50420eb9af948c2686b6d9934b28b7d8af905af919bf63f76f8c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough-amber-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e4e82b6ac4237782b24e7e8e1a8e446bab2596f17113c59e31a81d9ee7943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-olive-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e8dcce2390235a89528e3abdf84a3fd3cd54b1f7b2b010b53a7a060c0c12b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-coffee-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdb471f1a3e5cff8348003194c3ea4d7198c60743bf96b93151fdf5f8db0a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty-beige-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae69308a597c1676f4f4a1fb2c4eadcfea25ce30cc0e5b045233814fb29851c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological-emerald-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f2e0a7c7f710998632c1d01d5c70686bf55d4b4b478c056d202c2bb27bcdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liasuren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4ac271aa34654ae9893bb23d430de7d1d5aa82c542fe7d2b1f30d724627fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric-moccasin-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e503093c035614f8baa37cf3e544f3bfb46bf9e6f5bad89b00a7e683d6a7dbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful-black-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ae53f2eb52578199cbf8d0beb90794928f64f8f4236e86598d647de3d1d59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic-salmon-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aee0d010026f9118e5619baeccc71951edcffa34d617156f0c53e5bbcdaac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...