MAL-2025-68254 Malicious code in fashionable-crimson-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765f80d1944e228962f4693bd798c0ec63715c89d73cc52e8429c25e7ad4f040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71189 Malicious code in tricky-indigo-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b8812da6a188663d41a20f2d5c9fab6dda39dfa2bcffc6a9a6898912731d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70646 Malicious code in skilled-salmon-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efed3ef41e7368cd9be586b6547edc9e2eb60c829a38c47c6e083f9d42105f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68012 Malicious code in emotional-azure-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b0168d10875cefccbccd6118df609c52d6d2123eec3b09ca30c4a4b725aab4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70409 Malicious code in robust-tomato-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5c2a0406505da20a9080fc73ba27400f717bdbe2f01d702fa768a7271f02a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69091 Malicious code in legal-amaranth-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c3d4f6c6336eb04d9103aa21dfbd51de91ed269d65c36db373648109fc66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69950 Malicious code in powerful-tan-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50120a95afbd3d8b9c4b2fa1ffbbd580c00dee50bc4f27510986adfeffd6c08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71748 Malicious code in yrinth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916810ec607c2451550d2bf989707b350a214f523dd4b37b8eba7b2762f9543d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67423 Malicious code in conservation-sapphire-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029f5f2a2b16036b941508aad51a060b818e658ea990e81b509fc68cb400de0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67315 Malicious code in comfortable-crimson-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9da6a1c8a9886576dd0b51e6b4d03e8508d1a035ac896cfc7e2d7f1a71bef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69359 Malicious code in melodic-silver-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021df74e18c3b6a8cdbaa59d60daae25620c6a1c6a0097d2fc0c0a54965bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable-tan-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d860e833ca394aeb9e14b4db0ab0b492bf12fdf6770bf82c3ac8fe02d27d914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69762 Malicious code in other-sapphire-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896b513c2cb00510aac6d963fc128765f95563c6d1b31fe30ae44e653cee2fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68685 Malicious code in historical-aqua-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c12aa59ed503981f956a6706c77f472f9fe28374e7bf39a7234a4ba5c745d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68280 Malicious code in favourable-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636daf04a8d75058a259dcd4f7dec0052e9fcb4bb953a1ae67d35b49c3dec8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69810 Malicious code in parallel-aqua-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b184a1dfc0ecdc9b9be15d653fb01c19d028491eccfdbf18edfbe4f1ad3ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70556 Malicious code in shaggy-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa7b27a00a1344a0a424769c84d83cb6c947b38fb643d8deb0aea0914244f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67737 Malicious code in desperate-red-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c886a564a2e7190cbca7540a26ddd8f65bfa0e9e43c7b6a493b24ce1c309ce0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68917 Malicious code in institutional-scarlet-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac77cedc35a9940452a25f759cd72bebab74678fef798ab054f93882fcf0f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised-scarlet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934037cd412f1508fdcb61d4202bac2a8a6208912a28677e744e44c65508c11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...