MAL-2025-70407 Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69763 Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66960 Malicious code in big-amber-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6d0edf6126a0426cbdd9428c728cbee561fcc5f789245646a332dcb81c0bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69891 Malicious code in physical-sapphire-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad77ed563c99d336f3278f134c27480c3512faf2127fc6bf8556ee20e3bbb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70056 Malicious code in prominent-moccasin-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58e694e074fad1631040ad2bbdb3885a9d18dcaafde0e6f1baaa4405e4da7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed-beige-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17023d19174226235698afc1748019f9ff972ec12a5ddc25893dcd6a04dfebc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-red-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9eb2bda60ae750343511264b364428d01e75c687fc4ddf562524f6e3bc8f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-crimson-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca4922998183fa450915085f19df4aefd583060164bc2a4bc4826ef23fd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cd3636fb3bbfbea120b4b96e14251b65d7f6d8ff91ec0fc0e3215fe4291154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-tomato-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ad301515d71c97966044c99ea1916b676da61613831075606b740c593ea50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective-jade-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935388bf76407cf0d80ef3d871f449c4874b63ffb4434da3ae03a9231cd20d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-sapphire-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9d71f93226fd1a3713fb3e6bffb5172c666cd3eaf208db62430103d382e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66629 Malicious code in acute-bronze-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e254478c454fd14b13f56821a18769184b9289364b23c5e04f12629d3e08fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-blue-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd5a98244bd01e0110ac5d444cfa88caeae953b583507a8f056ad210fdf7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...