MAL-2025-69197 Malicious code in living-olive-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f16f972f5e9e41c5720bb9a58345a1c01c60b893724218e009208547750173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71286 Malicious code in unhappy-blue-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0c297d6589646cc19653d09785ea62e811693d0b9d457a2f23d7be775f3f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67591 Malicious code in current-lime-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105535008099d234fc5a7a2e4aba4de479b82d6f6c0f03e0767b8b8f9dce6ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69491 Malicious code in muddy-magenta-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503d62ae228ae4a7575e52392f52d4f8deda5a01312a5615c51558c0aced28ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67720 Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68133 Malicious code in excellent-beige-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbf8f4bb08ce0fe167c7331ea5214f11c5a8238fa013f338aa8ff94bf7c52fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68895 Malicious code in initial-purple-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b9d9f5f99e721c6dd6a4832f73f6d6d4a0d8231fbd1dc72f2028d48112ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67509 Malicious code in corresponding-brown-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140f0f0b23309eaa3c89c6004f5dc95eaaa443a55993c18be267de7ea1cf8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant-chocolate-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fd2123f6d6fff1023db4ac84ca3a92460a927df6bf9823bcffda55726472bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim-peach-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f41b2319588b2217f39c01396663705c121187a410907691b549bca6c444096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow-plum-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45685ac519da98bd076dfbbafd6a4955b4d8be1ffff492c840df1e8259e40cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-black-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015d243eedfcf4e56a928170b32e5515d0a1ddb7225c4578826501129ca59578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred-turquoise-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f99e8481fcbec84d2db566bf22d6a03861a58572abb656fd8328cd1906265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68762 Malicious code in icy-violet-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ed23d60a636f5d1d228f2e1c5e8432066e3f629a30d9c9a255b40251301a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67303 Malicious code in colourful-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69658 Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable-pink-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9f3eff7cfdf25fce455185d5b3ce95318dd41e8d299f0108847a1d97abf1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68833 Malicious code in inappropriate-silver-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5dd7eebe297665fb4e6e48d9f7324ffb00822cc5d44e10ea2b6ca73fae2433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...