MAL-2025-66586 Malicious code in absolute-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc917474b6278dddeff82077e8c62305ed769295750730698a727714569c614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71102 Malicious code in thick-blush-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e7f22ffc7eb1f8bb057285924ccebd99dc41765eadfeb30c0bf751ce37087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70958 Malicious code in superb-blue-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11662f2132569d9ce73869013df64003ee0284d624126ab3dcdd0b412eb2772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67671 Malicious code in defensive-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5635a35573ffca90811fb73666f2b012a7a5aa25b05950bbcdd6c400c44f7155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-gray-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377fbd27d08702c79b0d1a1cdc40f97e99b2119553e5c69039ea258acb3e568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-crimson-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-brown-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92dbd6087014491104112cf573b4194681ad6f5012eae47f1d3179a460191ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight-bronze-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea71d9d4835088800f116ab520a9931b775d9a6802ed21681479dbaaa5bab11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular-coral-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dfd478ab56bb5352c63eb299c5e1b5247d740748ddff4edc9bcf16cb7a0904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-pink-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0247910e7de4ba623d867d1ffb121e5d129de62d2b3ff4412803a083e2a801bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent-white-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235fa9d8a354ca8e9223a390156368dce547fd4dc40870e237e4d3c118002f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-tomato-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff4749a304e5cf0c370e44bd5e048bfa68027b5f3a05515931f48dd69f39646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-copper-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace9b73582320f13560ccc4e992176c395b9907b3a4d9ed3385bde6871ef2816 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyeonhau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c827a02789b20087042259dfc2637e7c37b55e9832731d54ff668303ccac3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-brown-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5fb16db51cac1deef1bc979e211362f3027d00773e1c92411822a154ddc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-aqua-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e020ca8a7a636d75f70ad620248ec44ac6a0d856a307afc390a2343d66e1656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-red-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3d7405795dc54a69eab4fe2508cd7b65b613180af0cee665c3d8c64658e4a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70777 Malicious code in splendid-coffee-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a91fc62b1d12053d35466b0aa3f98af9b3da0cea34ad55f598362f06513f73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...