MAL-2025-69146 Malicious code in light-silver-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e163dce4f3fa89dceb1d9b432814698224f571817dd85cc7b1c858cc0f437e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional-yellow-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed80c92353a50938d0de7980a6a259bae464fea0ac6ef70f6d887fb1435854b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-black-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d9acba61372f89fd423c07756c457ecf75d21cf233e9168ef412bc45e36617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666056d8ef425ead474666273198702a7f93de3b691ccd89d49353c9620ca5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely-coffee-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888b7793daa45c8e25e4ba636ceab1f3442f3e18ac5a06219afc6adc5ff70ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-maroon-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e68a070556482501cae8e921deabc021e7a8bf8dd4a2c6a3aa92628666c2f50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical-olive-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe0940f9791e0d7a41a57b3916d05a6362323a0d6e840d65a31ada4a11f4225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70331 Malicious code in representative-green-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7004faafa9d3ad86872f028aa8e3c09524a0bdb71ec442518c381f0c767d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70085 Malicious code in provincial-fuchsia-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f438f54ee690541bcd9c04d107d7e3285aaf5496ce2fd5f45611ffd0d6b03c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68087 Malicious code in estimated-silver-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d51eda0ec5460a4558fb62fd40d9e007e6ebb8adcc8728b33cdba241dc332b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70663 Malicious code in slight-scarlet-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f2726a87665b474848a451cf5c0736ec22112266bb48a3c9f0b175f0d5b104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70061 Malicious code in promising-beige-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9eeb0c4846b89701c98be52ccfb9503a96dd3c76af465d90dd3bebd58b9b561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-jamblang5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d40cd31f4983c1c1de6957ea136aedb548919bc69b6480aad5e20f3f41e64f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-teh99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4254fcaf07d2c7f15967be7a8f8d730b40565896d858825f2186997c69550fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64880 Malicious code in putri-bakso11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee8ff6c725670d4dfef1f7aec96c1ba3b1ac485954c23a122c49852ee4851c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...