MAL-2025-67572 Malicious code in crude-salmon-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb70912fa603d86271c8433e96b0ed27c99abc39f5fc51621bbb839a3cbcb37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71654 Malicious code in wrong-gray-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955b204b47a9d69f34ad4b3a6f49a478fa125317ee39ef36d8654afbc76a33df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70195 Malicious code in raspy-orange-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e171bb96710505363af0290abb44f30a6d78b22da1863205ec19ef7c3d621f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71655 Malicious code in wrong-jade-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52a412b59642d16762893fe9cef9468e722dff49ba342b0cfaa637a67ca85a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68960 Malicious code in interior-olive-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aee0179843fbf4db2d75ec31dbeb23930973d238f768e015a2924c012833225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67669 Malicious code in defensive-green-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df0324c8bb8eed12214cf5efd1c46850aa70ee1cf7e6b35924804581422169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69703 Malicious code in official-teal-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74043b43b1462fe0d306fce7076170a0673e912e1a7be5c763a3b881b8973c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70831 Malicious code in statutory-coffee-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452ef6c46a3f79bf07cd11839b275f918df52ea9ab673670f42d3fb57242dfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69578 Malicious code in nearby-chocolate-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8821e383e28d568e13ee56a7fc7326465188058e2dbc87278fb1483bc6b8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66772 Malicious code in amused-chocolate-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1570404212c2dafbc5434580cf94579a9fda1778bddb1346559ed891f47b55e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous-lime-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bff2ce5f7ab0d43c9cc53b3a31d48522a37ad6ade9c9a5c41008848f62306a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69250 Malicious code in mad-tan-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf39193fabcfb33a7ae0b429b8c66ac58c53976a4ad3caba6b8b438cdec92161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68711 Malicious code in horizontal-tomato-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca73369bf60dd7256664f099758550acca0a6313f2130ec36fcf7ea078642af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71261 Malicious code in unemployed-brown-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c124308dde98ea06ce927c7260da20d48553dc54deaaff8e7d00518dfd8b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66995 Malicious code in blonde-crimson-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ef3caa36a1c7231102f440e910b57a48fe7dec85554b950eb708a638f4c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71162 Malicious code in total-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d797c6b5d780b00267c0ccff59140df7ef7024c8fc7b966c6f40e6b7b671e039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68250 Malicious code in fascinating-blush-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce75a19e1b6f33f1b763653229c8ea79dcfec2ebe7e28475b4077043f3fe0108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67751 Malicious code in different-coffee-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e2abe141cb0e0691f8260778bc27a60eeadb063ef7e6f2aa567908e97e7e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68691 Malicious code in holy-yellow-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5565961816745269ff38cccb7f21cb829a9d41541b8e4653ab1747231b5fc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67187 Malicious code in chubby-azure-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765a1030a03af2740d1f520dfa567b4aa16d0c9d98e8ac7559b47e985f8a9280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...