MAL-2025-70242 Malicious code in redundant-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ee274d8d379fcb47e73967a3ed7b93d0f3f6febddd5fa80af85eb6da54912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67618 Malicious code in dangerous-black-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c0ed07a7b7306bd4ca283dd90784ec9114544a0eed7ab202743cf3bbab2f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67932 Malicious code in economic-blush-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c136b75355a828f2c5cebd7e064c53de7f25c0f3cffdc33e4ff9ade4ebf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67539 Malicious code in criminal-aqua-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab92c0dcc660a4397b309589c23fcdac382eaf542741973537e39a51e9f05b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69109 Malicious code in legitimate-maroon-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40046addc25801c286d4b245da48b7b614ecb63ca044b0d8f6c4638df5cbc4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68034 Malicious code in encouraging-violet-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9861a19f3795151004d24a4c2a30f26a1788d7634dbb432f744c00dd5b839150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71029 Malicious code in systematic-ivory-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b8e260b6e54bde8b8b7db1f6a85512159b40358c29145e90c83155a95d974c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68701 Malicious code in hon-olive-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a4078fd8c75c241a22ce02514b11d1a0ac4d11871e7f15c7e5dacc6fa8d33f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66895 Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67209 Malicious code in classical-aquamarine-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64482e0adb352d7d09cf79aba8eeb20c513d1bfa891655b4e188668a5fc0aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68986 Malicious code in isolated-bronze-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6235956f79263662ff129bf606e13aa3be29e48587b62990b39121fd5ecceba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71062 Malicious code in technological-gold-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145a79b328c66987ae84ddc2804d7e49501a8a21ecf91b8a29dcd64c86f55f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71288 Malicious code in unhappy-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978841f80fc19dd53b344847c548bb20c5b0487ac1df105de83e173fe8941438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68077 Malicious code in essential-copper-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6553e3185c461d94f9d1823461fa82e2d8b2362e7d8930a215129499550d7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-magenta-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a3be32eeda2105f68bdd87622ef37b1d2fe2a698c444f5486755126190fb2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy-tomato-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd00a7a746476d5e8a788c9f497c5292b2111b276b43553caac5cb5fab0e7c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy-plum-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4084b3478ed44e10d6d75f96fcc305cd56aafd384dd35cdfc8cb603af60006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-rose-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3a49588130d1da50416b111c6e71e7073b1b7a813901c2118cc70b34116dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-gold-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d528ac9ed12371a60241a1873f86b3ab5743cb20825bf168d31f544b7ca993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...