MAL-2025-71338 Malicious code in unusual-aqua-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd74cb794abd629b986c14fde81fb872c11be080fdb04f591f39956fd4b9a182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70896 Malicious code in structural-maroon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3f80213b2a5d415b6a95a93c166edd18f8ef8afa677448b349648174126ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66755 Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-olive-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9394fea9f851588f25f3695d77d0aba3dcb8ce1b0b8d0e60e055e1f8538f28b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel-amber-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47282046cdffb24543757ceed22797146441dd8dca5d0be6617f39595ce7b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69783 Malicious code in outrageous-orange-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe1ec031559021ee997f82088e3df76753ec19574fe779efc06f0c21159a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70609 Malicious code in shy-crimson-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c72ee236a89fd80832a38ac814cf8e4f8c2a3f4277c7aff3a0af2cc68386a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71739 Malicious code in youngest-azure-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d1f11fc255e5b11cd6a8e8101d607e076d97ce9b67c1ee15c524bb867bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69516 Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70669 Malicious code in slim-turquoise-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ee23f39befc0cdc4eb8d013e10460c3c167bbdedbbd467667c24b6da335ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68822 Malicious code in inadequate-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53932b71f797bc22b1bde0044f33a0d4b5393fa5e6f2050c4655af034dad98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71069 Malicious code in temporary-fuchsia-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b632e80fb257f1c2632572b4cdb768e6a8aa79a52e199ea2d55649fdafda0a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70109 Malicious code in purring-coral-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89e19e997af573efc8424b164ca65ac01c06b0cd0613350d640c0022a31d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66572 Malicious code in above-aqua-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63562885ccfb44871ac01f2fd066d79ef8bcde486ebb67e514d806031d6fcd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70130 Malicious code in quarrelsome-yellow-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2357cfb88308df4dc284ddccc76ab81bef6bf187d78d683acf726c6e34f4357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71536 Malicious code in weekly-gold-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd28bba5862f5422140e3e10d2fc4e31fbc7376354066e380688ab965c5799ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66984 Malicious code in blank-gray-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4052c1bfce7d299114ecad3210d4be6752fa9885b85999b21c5317f46ba1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68983 Malicious code in irrelevant-coffee-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c260a20a1236963509af69c32ae15248baf1b30e7984eeac4c28d3cf0ee740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69872 Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...