MAL-2025-67733 Malicious code in desirable-moccasin-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b189fa70eccd310cc2970314ea3c67cde21f05fe0244f46239f4d22f283c66b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67278 Malicious code in colonial-chocolate-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a160156899d54efae165224b9de6a63ad9d79c83010fc660a3dbf1c0b4a779de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67073 Malicious code in bright-plum-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a28efa351aef74dbb07c7ddf4f5c231b701adb5b7c7d750c5697a70a3953233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69064 Malicious code in large-scarlet-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6017ce7df242d231195866da3cab9491d600b67255f34d9f1bf361b3445b8245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67372 Malicious code in complex-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a719b585b622b13ca83a1818128b59319277cbb85f5dbc1326fde0604a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71416 Malicious code in varying-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ba0b3bbeed6858ce4b5ffd4bf8d892460e4f9dc2beca25386dd44029c3c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71277 Malicious code in unfair-purple-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1378640b3c692592596551faec9e702160b564196bfbda86ead17c22e099cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70247 Malicious code in redundant-copper-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83be33bb838ae1270ca3d9c43cc88d5b5b440a1b40965bb8c472afcf98dcf4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70530 Malicious code in senior-lavender-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b496652867d1ca8bd180071f9ba47e27ec65a98e0d66cbf75c6a162b1a400a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68176 Malicious code in experimental-black-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce86214385d9ab56677293ef8e4f73dc67e1f02a56418fa7d2f8ac5a5b0b334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68086 Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68093 Malicious code in ethnic-amethyst-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d02cd1afa5d8880ffa0bcd4662c36c45e7c0e9302c989fb5abc1ce56124202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70097 Malicious code in psychological-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b28bff64f07533a7fde60a1abb6e0ad7af52d0d87c21db63daba06ebabfbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69643 Malicious code in notable-yellow-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9baf9abaf76efb60a172f501918a23d6a7648f648a1d24c7e2fbc79109da62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66653 Malicious code in adjacent-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359afc346aae1c37cbbb589d084f5919491ad657babbff3571d6c8315eb83b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...