MAL-2025-67839 Malicious code in dominant-fuchsia-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66784b63dc03fd36b548946481748a2b043e092f2330fa295bd7553b3f5b2b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68149 Malicious code in excited-red-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f763e235e5d74ea18d2c972f733fac308177b2c699000271246212d4324f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68201 Malicious code in extreme-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890c91627cc6c652cf395c5a897dc51dc34d7d32aad8e9850826e492bb373793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71206 Malicious code in tyuiskw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610a5eba34ff8beee46ac6cbdda5d2edfee874598e039c3a2f915aa7a5e69b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67276 Malicious code in colonial-aqua-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421d5d948f865480c916e7a78bd3634601569080e5a1cfdfee1ff76b0aeaf019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70444 Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67599 Malicious code in cute-green-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c372766d52d748c66e571b7225cf77172d1fcd0531308b79c3483962e6ef51a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68174 Malicious code in experienced-brown-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680870cac03b6539e7e0904c4162dddbb6d43aefb6a985780308d72bec4d5952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68848 Malicious code in increased-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2532e0760780155f3c0d4dfa726304ed89309a929fb13e5a3393f8face27cd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68849 Malicious code in increased-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ab35d46340cf889e3ceac76aa3a523906759caab9ef8b4409b967f44fa5d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71599 Malicious code in wily-peach-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee4681f7a3e021bea6148a34b4cb7874623c2b066178be151885c1e8c426a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69062 Malicious code in large-moccasin-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21df92d5300ca508dcfc4da4485aefbe0e38f9448927e14d6afc75aa0d8c7877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70110 Malicious code in purring-coral-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdde3d1875c0e4107c0619040e5f959063955ed6722424fe08f70b2ee3aae9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70703 Malicious code in socialist-green-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc7e04a1d8c102740aa9a5a2ca5677bb71f662c0da3def1fec5716d1f0c0a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68233 Malicious code in familiar-teal-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f777adfe31ff14eaf312c4d21ebb6e3e86511ace904952a3ca2f347aa19104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68266 Malicious code in fast-silver-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175116f086b8d70983393da40e15c19aca1da52bfaa3d6e6c99e9e1ec3080778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71056 Malicious code in technical-blush-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159bb978070ebdc42f2c9ae5c2ba0ee6df33fbc5dfa440fd2e6b414695272f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68299 Malicious code in fellow-gray-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bb00a2ad50757c9b97187c89368d66cdd3a65a6352dc3cf3be663fdc33f246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70354 Malicious code in resonant-amber-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d7cf99d628381a9820957a89ec1f6f8cbb49062b19f031e42c9607d7e0f06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...