MAL-2025-68354 Malicious code in flaky-blush-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431769404a9a8f35c84ce32881d885e272581911b60c40bdc8a75f8b544a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71342 Malicious code in unusual-magenta-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86502e71f7514f1702901721eeea288fde5aa0fc50cbadce058e9d360e162f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68208 Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68047 Malicious code in enthusiastic-tomato-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e35e2dc983ea87210a60ebe7c84b0d86e482639d7e7b501c9fcd372b8164ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69603 Malicious code in net-black-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3552019798c7a3e5ea1f44e788da4b1cea096bee5c584e27a3e05732c48e0e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66704 Malicious code in aggressive-magenta-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c23a57b45f390648f83ce35cbaa37f6e384aff2d3b07b76423a8e31f0d14ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66596 Malicious code in abundant-emerald-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfc002b9f96067997002d3bf313df8983692de21ca53a8743048fae9a30ab24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67380 Malicious code in comprehensive-peach-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7400538e836cd22c57e8c1e72ccb047ca588e06f6681a730bd6de4cc977dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71661 Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70305 Malicious code in religious-yellow-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e26e9e69dadbc1dcc38b29eb053cab96ce7afc3deca3f3597e2b8d04c0282d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68668 Malicious code in high-maroon-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ebd30131856196426dc1efef35c046e54d0dc46f860f5525fde2b0713d0c89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67750 Malicious code in different-coffee-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa81f9c14d6aff944c400d9139194ef32d9b1c268eec2c87b74cdf57f5616118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67038 Malicious code in brainy-magenta-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f59f32491305de009093e0bc98621e3132083219767f593603caa6a098ad18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69423 Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69781 Malicious code in outrageous-crimson-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e316ea03ac81c7e1dfd3523dcf00b64023c38ef69e7eb76d97082ef7c56589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68685 Malicious code in historical-aqua-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c12aa59ed503981f956a6706c77f472f9fe28374e7bf39a7234a4ba5c745d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...