MAL-2025-70777 Malicious code in splendid-coffee-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a91fc62b1d12053d35466b0aa3f98af9b3da0cea34ad55f598362f06513f73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71264 Malicious code in uneven-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e581fae095700711576a7e6f8a3b9288889912ce3600659c615ca855d385b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69046 Malicious code in key-yellow-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71732 Malicious code in yodelling-coral-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508578254beb55812a524287bfbd102141dc41488ea6dba0906f99885358f2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67588 Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67207 Malicious code in civilian-chocolate-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec1167f5e94b1bfb198b44c75dc95529809fabbdddacd7308ee7a5beb5b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-gray-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377fbd27d08702c79b0d1a1cdc40f97e99b2119553e5c69039ea258acb3e568e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive-brown-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5fb16db51cac1deef1bc979e211362f3027d00773e1c92411822a154ddc02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67671 Malicious code in defensive-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5635a35573ffca90811fb73666f2b012a7a5aa25b05950bbcdd6c400c44f7155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lengko73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604ade10ee64368d7d4b1d934baa82947eb5b42fe27311997e182515cdb82f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839ad6cc8121b6289e2a49cd80c719306a42a9b1f59ecd443de149d7e1cd61eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-toge23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a91954c382300a26355ac78cab54635106fc3455395b931393dc4b799c4320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-bubursumsum39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e314b06bce2e866de5672e1dd0d7550ddf4a25b14a027310fdba32cb8afa77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-tahutek27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459cf9d18e38ea0d07adac57ba2cc7b84e65b9e66ad0d9d6e56eb2eb337e3a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kue69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556b98756a275020b9c0f927d335049fe917d5c99fa87bd0c16442ce7c84aa6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-papeda6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8338fc8b8490abc1d68477a8166b557b9ea4a60a9a128c2e861c41f58819b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kemplang62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee4da7da52c2a1933114533b367d3ac1b10ca186e7114f871fce7cecde1c7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62015 Malicious code in bayu-bubursumsum14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e3aed27a18245d74d846cd591126796f62a6a9a1dfd32e67f539d6e666315f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...