MAL-2025-66995 Malicious code in blonde-crimson-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ef3caa36a1c7231102f440e910b57a48fe7dec85554b950eb708a638f4c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68976 Malicious code in intimate-silver-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77857f073e5fff3e6d2fcf8597e348c4e978cbda748d26807ad309edbed9e09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic-salmon-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65aee0d010026f9118e5619baeccc71951edcffa34d617156f0c53e5bbcdaac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69437 Malicious code in misty-blush-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f15531f98c11a93d554e7c6ebf1e705870481548ed585c7c8464e7ac743ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71224 Malicious code in unacceptable-amaranth-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796c69fc43ed74076a7f3338d2367cb6c2e09df4e9730cb2a16dfc6b1a5b6741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68843 Malicious code in inclined-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d817ad13ca89968017d865f5bb31775134541915681dea923142bf75a8f820a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68958 Malicious code in interior-blush-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cafa567178a7a53031107dbbae1b4faa2e08f5b7060870cbf6f44f9b13b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67350 Malicious code in comparable-tan-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4241a4fe88b63b681d8b8605692ccf2a8f5e2142c813b6e1b2105d98f51aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70222 Malicious code in realistic-lime-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea3da6e81afed7e74bf24dea666b566c8e6c20492d5bb77df61ac1b998981c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69274 Malicious code in male-bronze-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b6576d4691ec1a340c27567b4ca64d57bb7da944a532020a3373df0c4cbab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71439 Malicious code in very-peach-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8454fadb8b0778147334e2557fc4b7c11085bcbf2b69b00e1b11bf48da85d0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70456 Malicious code in safe-yellow-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ced9058cc261e240ed8a0706d7025f323dbbcb856ec5600903fa5910215f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70867 Malicious code in straightforward-gold-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96bd0be9092b42ae51f79cf28f318f99b6b7481b667fb21c8721ac0381d41759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-tomato-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691132fb1ddf302d3b5999c13c2d5ca5e12c1f0cdf638395088913075e126358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in veli5631 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d84a3ddffebaf5dc6e3cfbff6f981c17461ec8b6322f306033c2c9a0a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic-crimson-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27debe60e3b5a6ab3a78fbff5aab5d5dd3ce8f03e4d28f5b341bee6fe68df0ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...