MAL-2025-70171 Malicious code in random-blue-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbb9f2154552be5a8f0ab6a2b2aaa847bd80bdfebe603c986f444e4835b0631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69626 Malicious code in noisy-rose-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468d6660cdf8ba3c3e44faeefd0221c45ac5d3ced050259728ffdc6e641f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71501 Malicious code in voluminous-jade-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc56092245fc81ed78d1a20e8465a893126b38992874501ae53bcbb1cfb2852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69941 Malicious code in possible-amaranth-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d0b9c301afa4cb3826c51032b235c15c1fb7871a2ee762d94487e17eb8fc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69798 Malicious code in overseas-teal-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd73502da3b570b70fa56c2f5130e415c9b06bdbe4397bb19565e192a84aaa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70881 Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68570 Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying-green-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd9470cebfb2d5f0e26cb6daf3851429b3cc82ab8d6c853b6c479403aecb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant-moccasin-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ec3d41649b5e9b7e4dbed45b8351863b20a94e2a758d0e2d695607bea59eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-scarlet-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e68e0abfa126ed9a00df5d880d8aa8c343dcd8561311ac2a621845546131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-turquoise-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda0837e1717c893d01c072d3a5deb3f4b10a76bbc4cd6e0e049a1c0b4116d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate-olive-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1685a2b91e71eb22f4e1d2776b1b294924d99f8c8c7d3241996f248144b7285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66586 Malicious code in absolute-tomato-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc917474b6278dddeff82077e8c62305ed769295750730698a727714569c614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67284 Malicious code in colorful-black-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5910c0cff95b73f5292666cf0659c144c28813f93dd88dec726a9167567b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68373 Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70467 Malicious code in satisfied-harlequin-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24e6355364ffbf14c639da3d3ab95928e6a0167704f22fd63935c74076a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71102 Malicious code in thick-blush-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e7f22ffc7eb1f8bb057285924ccebd99dc41765eadfeb30c0bf751ce37087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69293 Malicious code in manual-lime-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1b96ac4c18e4c8d1f8052375b93922ea8222e7aefb1b7bd7047486e686cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71616 Malicious code in wonderful-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78515120ef92d62fc21017834d629a81d509c4b67a4d00ef50c4a96991e2f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...