MAL-2025-70061 Malicious code in promising-beige-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9eeb0c4846b89701c98be52ccfb9503a96dd3c76af465d90dd3bebd58b9b561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67739 Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71173 Malicious code in traditional-magenta-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc75ca6e9d18e3be27df8c93b018cec305c635eacb3c737b572c470243b78e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71418 Malicious code in vast-amaranth-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64734c0e9328fb183586a3c01f34e6422cc78e6042ec4afe7ca88a0d2f61dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70085 Malicious code in provincial-fuchsia-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438f54ee690541bcd9c04d107d7e3285aaf5496ce2fd5f45611ffd0d6b03c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68247 Malicious code in far-aquamarine-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d04bda03e90522eb8d614bb7c398d3dcc6b8cecf44410066c103ac0b58416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70331 Malicious code in representative-green-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7004faafa9d3ad86872f028aa8e3c09524a0bdb71ec442518c381f0c767d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70551 Malicious code in sexual-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6151914596df3e7fbc5bbb5b6e9bb4d0dd14880e46382f26ea90ab5e15d023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69146 Malicious code in light-silver-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e163dce4f3fa89dceb1d9b432814698224f571817dd85cc7b1c858cc0f437e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71357 Malicious code in uptight-maroon-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed3a2c51170349d30100d11f306aef82e7f1bcd625843e5f8c1f6f5429afb7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69383 Malicious code in middle-moccasin-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e5951948c78f1a84204733df1726c6f7c147ccd307997906e81139545fd53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional-yellow-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed80c92353a50938d0de7980a6a259bae464fea0ac6ef70f6d887fb1435854b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62530 Malicious code in dian-kolak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4b090b6a99a92f476078deb6254d880cfad0e8ac6d38ca6b44fcbccbcf6700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-tek28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6efd780977ae759e88cb78d1ee8b61fccbf30f1d02ef858e69641cfd3e5bd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65064 Malicious code in riana-semur1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fee57eef0f3be6065b677ab38ef2a42baed366bbd11be7d29f95175729b1853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...