MAL-2025-66746 Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69048 Malicious code in kind-beige-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8c6ea8ee89b123c3cc37f8cc867f590cd2faecc593e870a802a369b78d241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70366 Malicious code in resulting-copper-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36175b16f341ad83d6506d14fe384d74ed5c1864ebfd4d7761b72c1c3493792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68594 Malicious code in grim-teal-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8c7fefc408c7546dcd7614814d77d99b7a17ce124a51df2ad9484e9fcf2180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68623 Malicious code in guilty-scarlet-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df2487f398a89ad3fbb1916852ee40829597b96a89a2613daab3d90d877f12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66992 Malicious code in blind-red-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c52e2448d9953490fc66339c18c799fddd447e39bf4db3f03612d483fc16d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69050 Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67112 Malicious code in capitalist-yellow-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ce80b69086eeca9996b09882eceddbc314bfa1cbb366cbd3075add499f8451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68451 Malicious code in fun-magenta-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b24d487f4d39c0ca4cae54cbcd87c29397feff35a0b21f4a8564ac8399aa4a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-tomato-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447519bb24a15ea0fefd750380d1c0950f555489134aa2e73ebae574bad4b381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed-gold-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5007da35138647293321e9ceb2a2d6cbb1d16680d119b4e0248d2f4bb21b0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious-harlequin-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831b5de2e9e7abc01224fd588df7e23941dc986f7e24a44b16493dd7306f29a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical-harlequin-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c59b30b52915ac400f2c78e3e78ca9e2ff6bbb0ece5956fe55b843574f16b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future-blush-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293cc35d267ac2e3a30a05b6790da4b9578d8e20b413156133a6e5538b1cc49b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody-amaranth-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bcef0009bf96f20fba0807862ed7e68e6cedb85ecdc312159f9a9cca5d465b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready-salmon-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6ef8e8554870ba4f8154d6cf2364a67a735f674280d8501e0ae9b6b53717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved-olive-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2936099ca0f61c01b1d2fd8bd16edc72c5a4aa64bb3f78065ffcff5c00239d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-maroon-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df27d46ca3177cccbe591878f31fe3c364af698a20a8dc42dfb933dfd30405f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f1b206ad012320110f03436837d2dfc620d43d35dd345b2b24cff4c25cda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...