MAL-2025-68925 Malicious code in intact-crimson-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593f864bd2be15f0c9fcb8d837cca08ad4ac1b253c8da109b8714dcb1f4e640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66651 Malicious code in adequate-yellow-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5692b9d0da96cccac6e5e8914ca293d8a24d32db6f074305ce7f0b9de30bb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71701 Malicious code in yarosn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066e02167623212105530fe5e0be7d59765e7db58abb9cf5f89d4c352e29c275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70339 Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66810 Malicious code in apparent-orange-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d714c1f13f04a77cfbe5a78ed06b12d7d3e79735fae422f55dd08d0030922c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69336 Malicious code in meaningful-amethyst-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b06eee48f2faaaaabef35eed69b34ac8deaf6398fa8cfaf1389fcf9057156e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69725 Malicious code in opposite-blue-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9d304ca359d44fcff19a25fb5dd3f670b372bfcdbcc0630114a022344d1a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67851 Malicious code in double-sapphire-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c79e97c70da78e4693d25ab309a27639b45dba0167fc6a60f56695e0309373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69520 Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive-white-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d405b44fc0024fda7b317301a2ab8c701e1c511a8fffe13394e0f039a35cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift-fuchsia-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed912f64783582852c6c3adce0c52bd1f36dd0864bf1745217ff1af0f11a8ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-magenta-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06238d448a72a1e239cb8ee789c5045a1eea31e51094f6611cc0b7561c17705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left-crimson-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9550de263b531af8c61719962971c817c475abf46cdd93385ba246d719fcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct-purple-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-orange-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e171bb96710505363af0290abb44f30a6d78b22da1863205ec19ef7c3d621f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-emerald-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74bd97e6eaff9109ac6e890cdc6269f49f121c0b5dbc516cae2e998eeaeb752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87895d93af91085c3d8940ca4c9cf5771d7a8dec672aafa47b2ab431be0f58df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-moccasin-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a3aa5eb5fa320cee1d2c6845c3f1d8d1865559654c45f5736c44ac7b2f2759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dragyg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f571eb05224447a1e23688acbd310f0f9ffeb41114c8ac14191e2c926ec13555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...