MAL-2025-68280 Malicious code in favourable-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636daf04a8d75058a259dcd4f7dec0052e9fcb4bb953a1ae67d35b49c3dec8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69936 Malicious code in positive-harlequin-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35625aa421041c9043fc41eece3d59029e31fb0f67e95340bfc1796befe08393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67262 Malicious code in cold-aqua-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30943f3e119c21087e433c9516342cc24d0b7e0c261c95d8a1e1d014a5fe206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-tomato-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e177509a34221db84e2de957e265c63eecdf467fbd4afefea2d4ad30bf2659af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous-coffee-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff67102627342380cc50b670a8b1ed5de2c476d25ecb6f45793e846916e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed-emerald-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b0baa120f81f5641fa72eae2b5cce3891e6b035a0645daa57d38736d29047d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless-plum-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1001041a5344d10719f28fb3150584b7bd6be31b08850bde799cd0965387e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf993bc186af8ace13c4c7fa0b58e3ebfa8bb8f4008322a4384297f382171e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated-tomato-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c63eb5d2aad6327dcd081ba9e3b2132bfae519926663c5977f42cbdbb469eac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69776 Malicious code in outer-peach-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86106e500d44ded1f27457b227400cf82fc95ed48680fe56df50bfe2e87539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69995 Malicious code in pretty-sapphire-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b70a577e962c0ab5c74fa4976a934bfe27aa0140d60e0deec0de56b1126aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69150 Malicious code in like-turquoise-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f72bd07a2a3703e929bb5e0f2822aea7b4dfb6b5560ba9a760ffb0863095a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy-aquamarine-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ff4af257592422027ae97e3cfbeb642bb58e844b34b151b461d62d42f53822d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68311 Malicious code in few-coffee-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbf6a56e178627fab96853ba2cf25e48ff7eee169cec7ac9d2a38ad5ce55c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71069 Malicious code in temporary-fuchsia-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b632e80fb257f1c2632572b4cdb768e6a8aa79a52e199ea2d55649fdafda0a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70109 Malicious code in purring-coral-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89e19e997af573efc8424b164ca65ac01c06b0cd0613350d640c0022a31d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70417 Malicious code in rotten-olive-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e730c2612af8f76ce72125664e34b9a198760d415e26429061f919a05177cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70048 Malicious code in progressive-black-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe39284710694ec5c5188692566b906383dbb5451c29c6aa18f90623a7e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising-lime-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9937be333f1ad789a37128206423d736e03b31ad6b644fad69bfb6abd56957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69359 Malicious code in melodic-silver-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 021df74e18c3b6a8cdbaa59d60daae25620c6a1c6a0097d2fc0c0a54965bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...