MAL-2025-66753 Malicious code in alternative-harlequin-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2cc21f403a1333178bedc367a7be27c454ae0e3547b4e5c80fee32e46673b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71054 Malicious code in technical-aquamarine-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb0b72ccb0206d34fa4a0059ea4ada77ed51b3bae187489d4f0f5fdb584134f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70824 Malicious code in standard-pink-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadb3cc284af7587bb8712587baa3ea36d65984a00c90af6140c257299a240e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70491 Malicious code in secondary-gold-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125e83ee289fe03534cba2ddf63090296a83ffd003e4297772c2d86ef1c5fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content-magenta-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ee92f8bdb2d9e916825d74839e3dfd2f42e2e85936903e9f2b642c22a68298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted-emerald-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3d13bb6f6787240593ce80d82740b2390ada3e404c11f565fdab1cbf1df157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant-lime-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80612f031df483c564f9aa4bc20938e434e0f663fab74bfa57d9f28719e8fcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empty-white-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45599e5c2ebc54f0d76f93e37bdbef5fd655a0358175082d2096c0d01d408092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67959 Malicious code in elaborate-green-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3d615271089f87b40b745cc0a9d7104daef9653605a2cd5b1eed8691aeb284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy-apricot-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95b6ec9ba7a464e0e34c0d3488a118f1562a5d36275c367c8312d485d4c00a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14710c3ebaf6a17c6ff7881fe33b4c167e029a49b2bd73db8112103863c5721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67787 Malicious code in distant-coral-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa775f2fc9bdcac13e8543a7305228ed4803521eb07029d18b10369c4f5c109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flying-moccasin-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dd18461d8be2110e18768c5f5ad74fc90e5c31137fb88dcec47a9b0734380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf-sapphire-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1b3654f6df5052ba5f77a4b9e59899f7bee538b5ee6ae69e48b1380eb3a991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in probable-amethyst-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcb4083e0c16d9ccd4fe298f2f0d0cb335ae639e741f9025cc1a7c0f233ba58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine-magenta-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c861480399591b330123437f09c7404804399ca93894eabf1304fdfffc0a99c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68125 Malicious code in evil-teal-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf27855b8d982d64570e54c2f90e76e0cb63f93110fdd99c4449dc1754f4488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70253 Malicious code in regional-harlequin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b830dc2b377d25f790291c596360936ad3fdc004df8ef1f75f8c1c205a885b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...