MAL-2025-71367 Malicious code in used-amethyst-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e821e1e214cf7b288433ed0ea2b980a6774a126634e7c575b8ff8a170e36542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68051 Malicious code in entire-turquoise-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abeee65aac3ebe3245a70a67839978a130c86bf38c7cfc132988237edc2be49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66993 Malicious code in blind-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ab5387398377f8fe5b26d3a451a47fa90b026af1b29dea1aae3761a18eb6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70549 Malicious code in sexual-coral-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856eee9d068ad2f981ebe9e28d3bc24a62442f2ffb5341c2b7e61ccfc83a2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71192 Malicious code in tropical-amaranth-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942ae06ef085a0a03e84dc0c29a8f569c775fe6013e42126c7a788499940ef4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69868 Malicious code in permanent-ivory-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31778d88eb79a1f7cb8a2148562b5d621874aba2473ca6a6387528cf9f01663b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70995 Malicious code in surprising-salmon-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a05c7e6f5b0389b624ef0af5f621190f9f72f54b9c490f49e3924f0edc24f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71119 Malicious code in thorough-amethyst-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0397318b7b2fe19b02dc65ba5d0e83dfcd6ca2adc224522b9bd51e03bc6d229b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68220 Malicious code in faithful-cyan-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0bbefb1da2fe9570c33af8975c81a61e2c0892837314147893dc772598c841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71243 Malicious code in uncomfortable-gold-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db70f00ac6910acd6339932d13510e140271a08f6d7c01ea746a9e47ebbf511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69732 Malicious code in optimistic-chocolate-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f0d1d7803616898d2f31a5ae9059973894d284e4f100212296514251d5a229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67575 Malicious code in cruel-jade-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c516995b32045be8f1119a44f4e60794662f23d1a78871cf4cc8017174c48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70641 Malicious code in single-peach-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d104c60259de9fdb858f3f9e1fcf95afb0f78de21d356b9e36052fe5bb3524f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66694 Malicious code in afraid-emerald-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2342adc95404f1fdd5607c8ef5e9e7c10fe7f2b5b1521f75bc3054fa9af5bfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67764 Malicious code in direct-aqua-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226b422317ce0cebbebe29a8b64dee113a5d4ed8f6172cbfa31751f75b8eea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gepuk36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4914afe5bc8c4034fc58159b371050445022764792c4f20224e8dcb264dc1ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1682db80d07a8f8d7cceb87bbf987a53dc3c3d493a9f01d25e9ad4b3880dec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-kolak33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106d6668ecf65c4374aab4739d1eb4aa43627b2c52a4730c6f0b51aacf4f398a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tomat55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0828881b09ff62735626f3e9277842d83558ac1068b91d7b8176c09ff02a73e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kue59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d98244f386fef7024899cd25d10f958128ae9d0646369e5db4e26adf2eda5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...