MAL-2025-71124 Malicious code in thoughtful-moccasin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f6accd6026252175134c0f62b084e3b62f12924f7763063592b649c59823c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70969 Malicious code in supposed-black-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba85e9ea99089dd732149076557ff7ffbe87e139298ea3e48898488b261e286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69675 Malicious code in obliged-ivory-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33251fd68ab452088d700395191723a979f6b5760058c765725f961d1de587e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66798 Malicious code in anxious-indigo-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb72d977790c508ef97e8fb512e4661f385874d01ffa0c88039113fcc763522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67678 Malicious code in defiant-peach-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42111608494ce914f66cc762b51cbf246b81e8531db1e35fdd132ac21d59665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67140 Malicious code in changing-fuchsia-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a2bd698cc48c32727b3b8fcbbefc96f831a463b6caa25fe2e186797281471f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66587 Malicious code in abstract-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3476ed856e550997e83958ce62d48f1ad159294a349c30473a2deb117168d114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67527 Malicious code in crazy-beige-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f648c4bb6b80db0adeeed0961f2150d876ec3b3ff39e7f0858912de99284e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68597 Malicious code in gross-scarlet-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66ef336dd759a69d1aafcac8ed70ebcb24a480e4214d4ceac52a8efb6157c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70948 Malicious code in sunny-aquamarine-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c2d34aa007b538b12025943cff1b6af639205f208a3697286b29e0260ccf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68593 Malicious code in grim-silver-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e650abcc427e730c5e75d21895cb036015f9a38717de2fe6cff9719e84e136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71474 Malicious code in vital-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245d42d0c0fde6a7dc606068cb1e51970c6450ffb25b89cca7780ac4c4e712d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70814 Malicious code in stable-lavender-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe3dbebdf19034ccb5e6d9f079b34e209948046f6434e541e5e58b5b236c4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent-amethyst-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e56b72a8b3c32c5a155c336e42b93d36b407007be5dbd22fc353f4f4cef38ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69297 Malicious code in many-cyan-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348f2f1ec8d25e4bec5fe6f0590a23cf17ed966f66f513efc0170a3e8700a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-maroon-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f64af68ad2f111c02fc4e3a3879163fbe06a1ae9cab25ade39d9c3f08d900f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69517 Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67235 Malicious code in closed-blush-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8755ba40f3a77ec7a7853564885b2aabe5396d98bf204b98d30f501debeb60a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68171 Malicious code in expensive-white-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3862006020dbe37b4fe086147cce3ecfdbd63306f6aaf3b08a5cd5b206745e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...