MAL-2025-69744 Malicious code in ordinary-scarlet-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f90fff1ace1d288cea32538aa9bfa10b25ff1caf18dff79c1893c40656cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick-copper-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade15896f0bd0055fce68f9c21289c67fd48e66d7dbd92f2dea6367604d98be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial-jade-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a9cbbb64438caa2f6d0e9f19e76e5983ca2024e067c77ab28d097f34c49256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude-tan-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ec296952f476fd14566f1d9ccdcf4691d71a42ea979e4bb1f944ad7c9b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-cyan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca9721d9803ea2e130a37a3e3124aa8d77988825955f4fabc0b856d6adbe441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric-moccasin-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f942d8fbf7308e93279ef1a7a10e6eca5810a76ce074acfdfa3c4c6abcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-plum-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47b21979d4eee5217f451c37e5ee4ad692e81b27906507e83bb9723ad7e4b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-aqua-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4ee86280906ffe93666dba0480bcc05a4e270ffd2ac98ebee38d067c9a329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70872 Malicious code in strategic-lime-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55265498f9cd5c1198bb5eb954fb63ed37c9195ddca2b656aeb45d6f55817097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71486 Malicious code in vividvortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2c046c6598bf76b4d7e9ec14900a3850a0770c4b8d5d8d74690d3069a5dc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70442 Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69238 Malicious code in lucky-lime-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67742340f3615c105d88c733b19ca0c186f5843335f10d893d0a43b0533567bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68715 Malicious code in hostile-black-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b784381ae56f856fa4ca30252037c9e973c420e8b832b3c04ab4cfaec92aa4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67240 Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69904 Malicious code in plastic-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f204726225328f6cb1f2143efdce1a4f30d8a9b04d2c0c6306d36e08903b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...