MAL-2025-68820 Malicious code in improved-red-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5150513588b3d38b2ffd135f84493cb45d600e4449e1f308d36a997fdab58dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68406 Malicious code in fragile-amber-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fd2fbc4af5f07c88ec3709fa21d54bf79501fc8295e370a4a7564327aa9161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71589 Malicious code in wilful-gray-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147898f1426214cd81d9b6a860619d476d6b506afa9cbd24ced16ec055b3ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69278 Malicious code in mammoth-amethyst-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c989dd97ef251fea7eca1383f63a26654f75e3bc99d44ac1fe4e59551580ec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall-emerald-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7289c16138569650387935cfde003c3311634ce3d7eceb9e18585e647586a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right-black-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d93e95d5bfe44016dcb7d0608937ab66981ccc2aef52487d0696950ff1da99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in few-orange-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b1c8c3eecab41b696b86851346ecfac37e182f047f9bfc77c977d371e2f587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-apricot-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c359ab7035fa1e4695fb77133358a40d5666578fc07022b35267e0a52db2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational-coffee-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67ac3c0e56dcb91798049a350fce5eebe71a00c3d3908094079d9cfe2c8724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035391b18ecb6b6da7a0cb471917359ee2c437aa3fdea6311e561e2665844e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4733f035a76f3a72778f0c4e738aff55017ba75200e0fd98d684ab72d0fb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66872 Malicious code in attractive-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342ed90ef9ec6b3167c1f6c6cc32a1afcb6922b8023cceadb2c8ed64c05c7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67117 Malicious code in casual-blush-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c003d334158a29a3ad95455b3c46391f5df6c12b7becf17f5027b575d67255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable-scarlet-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe836f7533d5f8ba7ab049f803a2cf4f2cc5262b6cd3dbd5e3ff871cd920794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70631 Malicious code in similar-white-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206529509c3f6e07edd868395ce1bd615fc2b1853d189fded8b7fb940f1db7e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70349 Malicious code in residential-emerald-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f7b4a24edc164d1781bacad5fbaf36677af93e046b468a5b65adf44f4df87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71004 Malicious code in suspicious-amethyst-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae072b03a5229101320d49a70e6d5df042e3d99e00107484cda9e149ee76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69986 Malicious code in present-plum-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8310bdcca0adb4fc4040db88c2109b3c294030599b7a9bf1e36f16c5d7cb825b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71489 Malicious code in vocal-coffee-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3b53100e68addd2ad29b62ffc17e9659e8be96020478252a6d2a50e929af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...