MAL-2025-68633 Malicious code in handsome-cyan-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee095dddafdcb0a5d97dc601d3c82170043d130222d37f9567ae9b3bbdb1e972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67430 Malicious code in consistent-apricot-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd5d006e96e1c85df967c4ae01a143ace24ebdc4e728d134eb74a77c63836cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped-lime-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5758e7024697d8a58d812aad5f954191180344c335fd39662da119717e9c3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-purple-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6646b22c5e66eeeb9121ff5987fffa05836d1b8784f79ea3bed543e9744ba250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-purple-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653b4b90182dbb8afea8ba5945a1a93986f37217edb0ac46346a825dd9345dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70798 Malicious code in spotless-yellow-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb10f33530129f7d874e5e77f2eb8ca58064532f076d268bc7d21ba191aeb0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69609 Malicious code in neutral-olive-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea501c769ba693b95ea99f724982890bc19e4be82874d45623b21cbb7193b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69252 Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-green-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272fac395ed048e4b4912a4bc15bc530d6f90e4f953123d2a78b6515b78bf641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67296 Malicious code in colossal-purple-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9029ddf5bd11b3e958843fdbf29989b75761e138bae50e83b5788ae80fcce37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67012 Malicious code in blushing-peach-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e56e3dc8b712a4794ae9cd6b4e814f84fdd085f1b138111850c2d2bb283a2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70660 Malicious code in slight-bronze-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d9d4835088800f116ab520a9931b775d9a6802ed21681479dbaaa5bab11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67202 Malicious code in civil-copper-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c59dd53462a2382ad124ef711312f510ee99617dc31f1afac4504567fef079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68953 Malicious code in interesting-magenta-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35852c710354f1f9d000a925da8839bee1235db7a21e68203dd579392cea17f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66786 Malicious code in annoyed-lavender-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5e07fdf7e66fde27929642af7bc6352edd59fc37fea4491f2b15a221b5230c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70178 Malicious code in rapid-green-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae324bfc8ee34237b6319750c305e0c45eda20eac31709166eb455e3fa2ef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70617 Malicious code in silent-purple-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b48ed2a9fb10cdea6c195d89f547236e68a613b0a14d5bff04e0c6752700815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68760 Malicious code in icy-sapphire-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e6cb9fe14643d77e337ab99099fc51fbfa24e704234e3672325c14a0972e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...