MAL-2025-71339 Malicious code in unusual-blush-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b69a002cc147342a2bc58de02f2cdebeb89b7517c6f5fd1cf07593e18a4aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68581 Malicious code in grateful-turquoise-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efbb396e985ef15b5bbd794efb9c99aba8264d1cdb6afe57f25d252b32d9201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70223 Malicious code in realistic-salmon-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6182fbc0961331903bf47a5def3f4057d85647ab5c6343fd745c94d8ff6f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70932 Malicious code in successive-amber-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf319fa049134671fc1c8cf995717a4c70b9e7769e7b81e9182f6662e1a7544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67869 Malicious code in driving-emerald-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d9acb216b2101a3f2734efce6eda5917a5d03bbb72249047b548019921758e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-yellow-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10ef8cdf60404dfa7dedb84a373b12d044415e0a56802c498d65bfd5a5b0dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked-turquoise-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191e8faa84c5534110cdcc93ce98e3bc35ff50e86983ce39391d8f6bff29c3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-violet-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396e17e3922ba02210663c27255408b99f97ca7c6c3992bbfd69b3b32ab2c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67529 Malicious code in creative-aqua-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5659c1f34205fa43ba5d17f75e523dc1f62ebc3ea2b16868c7f1d744870634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66840 Malicious code in arrogant-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b6c767d5417558bc30feaf7299a5b8aa918a1b3974c20fa91c2db7f8c1f794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68695 Malicious code in homely-harlequin-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8af9cc1cb65990fb888c3dde03693ea9845f022365674b37107b1bfad125b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68647 Malicious code in head-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69304 Malicious code in marine-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a138110f729f9bb7630bfd7cc294d29fdf6379de68f3fe99b9e7990d62ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67976 Malicious code in eldest-maroon-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8639f7fd51f2fd32e333c3b7029e562537724633ba673ec09d847fc66c09b662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-jade-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b724441ee7db3262dae9204969981959d9bc7733b015a87d78597b4574e74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69680 Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68613 Malicious code in grubby-moccasin-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9cf33eee48287783a1a38f7f919e42b1b2b3d3a792fe1fe2b59a3405f73047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67698 Malicious code in delicate-lavender-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ebd5f6b7895626148808abcd74ff4e91239dd64c538a86ed7ccfc04b1decc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...