MAL-2025-69388 Malicious code in mighty-purple-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebe582034a0a93cd74b16ca7ec3c630d6bc3ef7496281894b6e202102460227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70152 Malicious code in racial-amaranth-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f200330347de6690edb8cda654e69b76db589ac0420ba01df4017a4b92808ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69775 Malicious code in outer-olive-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70c6c4c3235c9d7e720432a75106ff836a8002f7561ebf613875264917c4907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68072 Malicious code in equivalent-harlequin-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b371d8ea114f05f5ea58089d0b9c5d42193425c6d6c1a3223c930045ba39b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68257 Malicious code in fast-blue-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd5a98244bd01e0110ac5d444cfa88caeae953b583507a8f056ad210fdf7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69421 Malicious code in misleading-aqua-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ffd622ee92435ebce845cdaeaee2600c3b254ca14aa600b3be0658d440b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71580 Malicious code in widespread-green-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b65909dfec1199e7cde9477ca8c9116406389e0d282184d38a98b39422d96ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66661 Malicious code in administrative-teal-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56288a994fbd55d08e1d7aa5311b197ed914c384bdfd97d0a3fe51f0aaa8b15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70704 Malicious code in socialist-lavender-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4509e3074331b4dc9d6b8d4d62aa4e51bbd83701775ec07ddc9aaaca0a4e45fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70616 Malicious code in silent-coffee-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ff3223a62a54a89e678df6f46dd92fccd39ae7d1d69ff9ee5a79efccccd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66651 Malicious code in adequate-yellow-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5692b9d0da96cccac6e5e8914ca293d8a24d32db6f074305ce7f0b9de30bb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66853 Malicious code in ashamed-jade-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc688265c91e65dd89a99b92e92216b0de372d9fb598c72bca5630ad748a61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69000 Malicious code in jealous-apricot-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9207db87e4031c77913a4b269d478ea65450fee184212b367c29bdec8884d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-black-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7908abfb5d588a21489e07daf34db547bdf9e488d2f5671af6b0e9c310468eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight-emerald-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd9b73cbf7385dc3d6b88ae5f6cf798a84a1cd0b13e77602c1c28353ea93120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental-blush-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef1c40d6f4460db0c71c9cd3223ee2b7ef99fce0ad7c628981a9a827316f03e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil-moccasin-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917702559c67dc704341111dd1b83b5766f12ac478c51e47b12c8fb3981b8561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary-turquoise-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8769883ea14855e234b72f6f6dfa048e974bf1bbc67d714ecb865fd806ed4312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary-plum-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b65026b202ba5839af990c323c7512f8ca01c7fc1d8e37414295f4d3edef7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double-azure-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e4137acf0eb6de7eae1bfaa6eaf2028de7954aae7bd777e86d4c03170e4ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...