MAL-2025-71082 Malicious code in terrible-scarlet-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf022aa89df38edd5da11dde4d7537a96d77f211ab7223241223ea811fe19b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71009 Malicious code in suspicious-turquoise-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cec611523826f66523029f1c2be99999437bafa5b33ed3d86c6694342a759c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67651 Malicious code in decisive-gray-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b3d85252787a911ed784ff099f41c3f6884b92310e856ec4dbaca4d11251b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69358 Malicious code in melodic-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ee3638c036a24c862b57966826c429c8628bab3db74c27ea8dfea4e094b2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70977 Malicious code in supreme-tan-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a189d6a1a57068d599e248185f196616262e136064a9782556b958a7be9252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69330 Malicious code in mathematical-tomato-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f979a30b627cdaffb8d1c1f5f4e11cf44fd1b8c09ca11ed587079b047a9be2fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70047 Malicious code in progressive-apricot-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2a0913145f1a2e86c5162f180bec4e8f15645b1d251446b6e3c418bb8d4108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67992 Malicious code in electronic-chocolate-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7a1e958b252cdc7dabe16d42149a85e0b475c76d193625e2ccf1a61ecf621b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66624 Malicious code in actual-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a4d1c80c457c80cc4b8fe370e4738d4360e7a76cb4a7122abc41ee43a77183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67207 Malicious code in civilian-chocolate-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec1167f5e94b1bfb198b44c75dc95529809fabbdddacd7308ee7a5beb5b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66934 Malicious code in basic-indigo-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0e85d3882faeee564e4e2b4ee8e65ed49664e6cbf47eef7d34b24ffd98235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66845 Malicious code in artificial-purple-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d842c9b4a43cccb21636c3a106fd3882e7cd0ea1feb86cf53ed6e58359afd94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69506 Malicious code in musical-amethyst-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e57fd3542a57a4b39709cda0e95e2d004279ca71348b2b9ccc05ebd41503953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69477 Malicious code in monthly-emerald-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd842fe6b3fd1216a8a16c2f1a4c1b37a51d3fdb841ad93928b4f4c73372c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69631 Malicious code in normal-plum-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6450bd4acbcd9bf78f4d6ace5062b53d0b5dce3e7013e7460591b14e060ac849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70289 Malicious code in reliable-lavender-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb3e8bc6ae437d4fe308792a18786bf81c3bc5d60d2d7a2c9037602a787277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70414 Malicious code in romantic-emerald-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e486cca7927a40d92f742d71581d78820c2974078854bb93faf6cb5229248295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66924 Malicious code in balanced-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d074f08c885d9b49e7ebd7a298cee46c28825eba28940ba3b4f861e8fd47aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68816 Malicious code in impressive-salmon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a27c052308b9f2a1c420d8633ce9ba85ae2132b1ab5cae14b99206c521249cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67031 Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...