MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71614 Malicious code in wonderful-apricot-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37331455abec78185d3395a732801e45dfc44e8088b774b5ba8afe1371b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71501 Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67631 Malicious code in deaf-moccasin-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3d6fb230dabddc5d739c51aeb70a1c009588c2dfce5ff1b560b2f33315285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66764 Malicious code in amazing-scarlet-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfbd94a63661e8bb125d0014c4193e4ba0a1a926c4a50e0572e6fac43df7c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70785 Malicious code in spontaneous-amber-caterpillar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf092a425f6449b7028bf1ce4c40881a76dbc8619ceec2d13a602a645780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70746 Malicious code in spatial-blue-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba1afdeb673936ef626cc56661ea35bb7102f1e5e0134fd2e389ac403ca79bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71317 Malicious code in unknown-chocolate-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb54bf6dbeaa93dd04abf3f30e30c145bda62f4256c2dc00909d762468385812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69463 Malicious code in modest-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5dce31c2e34c15682e326e0dbc982d7cfab618ac1847be297962ef8f08b6f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69457 Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69918 Malicious code in polite-amber-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb50cb1a15dd90fcb90dc3bac7530e6b8b2e9dc409d48fb85bbd08b675ecdaf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70809 Malicious code in squealing-cyan-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3363b64e1891ec306ce92975a2fc4c55c5894c7c938834c0c40ce0fe64fce47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70880 Malicious code in strict-pink-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679ad0614a731a49217e438755be383bf6646bcfd03d610c40b9ae189f48e89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66972 Malicious code in biological-indigo-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6e1e4274dd6adfa1d5189e5cef993caeeef0a8884a19c11b2d8d14ba8b24a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing-maroon-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273835fd080d168d7f0937821104a004ea5cd9a41bc3a4ba145e29bef059c4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-scarlet-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e68e0abfa126ed9a00df5d880d8aa8c343dcd8561311ac2a621845546131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-blush-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d4b8f6d0100932926e0cc4675c9f3060cc43bffd9cfe92680e70ea3c4f3043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-coral-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0379814a47f9dbc8e639437f8e5f06f875446464c5c017b14d1917eda7f321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...