MAL-2025-71531 Malicious code in wee-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65973ca7c9e798bc2b5ba9cd4bdd2679ca5f6ae769ee0ad739a874991427c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71210 Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71578 Malicious code in widespread-cyan-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf659feaa5ea0101d3da8e2f6ceb6f38ba84998f01a60eec5e5305421f801c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67218 Malicious code in clear-amethyst-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb4ce55da3da3afd5d9d868d43e2f72599d0c773087acd1ea171a4873667467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67774 Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68402 Malicious code in fortunate-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edc9bf1307397448c52dd91018ec02b3d8c0e112ce80a1b095f39a38e2142c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70790 Malicious code in sporting-amber-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2f626000b197e3979037f0b4b999f6a9a2009d8626b1424b2d4b20bcf24691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68053 Malicious code in entitled-apricot-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f1a1f87eebdcfa71e0d151c7abef90d5d9b501676fa011b5e489452a58ff6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68391 Malicious code in formal-tan-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b7af47f718a58247cd0b3e993a1b866a6d6c0aa4cb45be4b226903f8ae69cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68050 Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67465 Malicious code in controversial-orange-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebdea4521e4382b775bb2b870bf75429aac7aa0555ba0dbfe8b4a36230a7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70995 Malicious code in surprising-salmon-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a05c7e6f5b0389b624ef0af5f621190f9f72f54b9c490f49e3924f0edc24f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67222 Malicious code in cleitczx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56840a4cfafbe2a9a38d59f272a2b544df7ec19e1096b1dd6881e4f11f36de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68686 Malicious code in historical-black-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e0eb9d4d6c3cb66e340a4096b02600001636c5820972b399531013583122d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69517 Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71778 Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70217 Malicious code in real-amaranth-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6754fb3e9d45c6f94db2de33517e938ccaf2f2088d79a0fc59d114e5985b3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68915 Malicious code in institutional-maroon-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0ec71fda8a84204a6eac12f582a9357269742f86794e18e4d39c4acf20c7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71119 Malicious code in thorough-amethyst-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397318b7b2fe19b02dc65ba5d0e83dfcd6ca2adc224522b9bd51e03bc6d229b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...