MAL-2025-67260 Malicious code in coherent-olive-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e088e308a9b81723feb8e759c3aee7c0d5c962a731cfe9cade31c35765473da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67607 Malicious code in daily-fuchsia-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91366efdc7ad5ece971225049a05537c61ab373858196fbc90fee907803dd2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70769 Malicious code in spiritual-amber-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4f5d94082d509532e8f71e20e1cd25eda9ff05a84379206bc281175df88437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67338 Malicious code in compact-blue-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f87e1eac2ed4f3288ab6975861c89eab1c22abc554ecba38edf19e0874ddaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66853 Malicious code in ashamed-jade-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc688265c91e65dd89a99b92e92216b0de372d9fb598c72bca5630ad748a61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66678 Malicious code in adverse-violet-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fc910559cbde137106830fb3e84d4c51673cb8af75310343f15590b1caaf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71410 Malicious code in various-fuchsia-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ed5575259c50a50ae03a024a99fd02a81263e72f3dfed04bcdb78c80c7af8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69766 Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68643 Malicious code in harsh-crimson-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd47c76fc761b49cbbd6613cb18cca3aa62bce7b032f13866b0c33e0059720be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67927 Malicious code in easy-turquoise-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4352792955d9fd4e29f6f960e192be61468901db93b715c89c6d57c7746c1fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68262 Malicious code in fast-orange-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d229bd5cfbef33df46f7469bab7e870e3a16c8dcbf3bdcd686a95633bdfbcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67253 Malicious code in coastal-amethyst-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defff1fb09bc6dbacacca8335ca78b40236f8f5bd8ca59760de05e9925bb2ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71526 Malicious code in weary-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddde8a839a4c7634daae040bef966d2931cd0c9f554eb60fa371d071b6bdf8c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66987 Malicious code in blank-pink-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e294bf7f2c1281d9bca42fd62bde3e62010e97e4693b6f66656bf9d46a85f6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70707 Malicious code in soft-violet-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b40a4d69aba395ceacd4ede4027eba92316f86a4da34d48027a6f7ad063e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66896 Malicious code in awake-olive-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817d74beb92ddab99b110fdea62cbf1ec6c09c5f3716da5f36951e161ba8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70129 Malicious code in quarrelsome-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2242212ce964287e26c6d7d1d186cce4535f06aa0cea1f73d91cfede382c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68225 Malicious code in familiar-chocolate-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c949266125c77f21e20a48a1b5432677b17e8c8475aa4bd7d3ade41490a236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69577 Malicious code in nearby-amethyst-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2066c0b8d9712c0d2baba8cec7890a63c64ca367b6407a9b4b21d40ddbad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...