MAL-2025-70048 Malicious code in progressive-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe39284710694ec5c5188692566b906383dbb5451c29c6aa18f90623a7e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69670 Malicious code in objective-crimson-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340228612a7f42a4040459727fcb3d327eeb92bf742d4dde99bfbb9684241cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70476 Malicious code in scary-lavender-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1e4ab8212d00cc6d72c26cd8e6862b8b07a2f31f292cb44207f93fa54aeb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67972 Malicious code in elderly-teal-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d3222d194fb0a7b004f41672d02bac4918c1164111c504eba9019224f51a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71208 Malicious code in ugliest-green-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7164225fd77f6454cf2b85c921239517b0e369ffff4b7ac3efebe665dd3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70066 Malicious code in proposed-apricot-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8990d126ce53efa59d01f946e1cae0bcc19e3512db6a55fb3b76288f8b6123e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69043 Malicious code in key-bronze-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918362f96b1d4bd3f7de44ad53beb5f397524b25a8ca7603534e6e705049763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69374 Malicious code in mid-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e5aafe244925ae91d31e7f4293666567fe9cc4c90ba33395620464854b0e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66972 Malicious code in biological-indigo-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e1e4274dd6adfa1d5189e5cef993caeeef0a8884a19c11b2d8d14ba8b24a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69261 Malicious code in main-gray-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac50ae13c089692a427e9a08e58fc637a1d950bc65765ba51b3913a61d50433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69480 Malicious code in moonmooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a07e15a119c31a9846d824ffe4ad9d996e2b78aaad96a1fee8e0afc4fb557f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70785 Malicious code in spontaneous-amber-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf092a425f6449b7028bf1ce4c40881a76dbc8619ceec2d13a602a645780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69838 Malicious code in passive-tan-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9646bf6982d7520b1864edb2c33dc58a6b0b9dd0ce5a06aa7202ada2dbdae718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69776 Malicious code in outer-peach-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86106e500d44ded1f27457b227400cf82fc95ed48680fe56df50bfe2e87539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70158 Malicious code in racial-moccasin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0ac61e39814ee6f27a08ad69584179f5ab2611a8a29ee34486db64a8378398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...