MAL-2025-68414 Malicious code in frantic-plum-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c162f1988d4f1b4412fb0ce9e71d63416ca5a35b2fbf7567a6154252e56981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71373 Malicious code in useful-azure-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bfc30d5a463b7cccc464c99cf73c70eaaaa12c2e9f8a1e40441c81a80c8e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71210 Malicious code in ugly-cyan-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3d1e384bf1ca5bc7e5722ebb69c87135df29ef5df831d382864521764f2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-coral-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa345f72bc247454a40bb68a329340baa3a276d52af7995e480bfe73b64b6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71448 Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71693 Malicious code in yammering-azure-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77be9ffc60626dbce6c46e8da868e991367087ea53ceaa2cbdc0623db3a784d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly-tan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7337333e293ce3d1b7f0a5080313a4c49bc3a1a8bbbd0c1ef5c6c05997ea5ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental-coffee-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c6017187968e55257a37ef5d357479dfb6fda4c2438d644d3763dd8b6a35e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gado-gado62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90642f75cd1f8395af4803fafe12eea2b21c25039f56fbeabb0407e78ab3a0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-liwet11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab97d0b11e10b1177f11c7eaad97f2117d52ac70251328cf219fcb6116f268dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-brongkos12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8a76939555467adea67679f19e67db85e2c367d9c3c214a3976da1a3655b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mendut85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6297949b4c40f33cb5dedd5f7565402b942b4430200184c06cb4aa21f6318ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mendoan3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5b3981254bd2305c46a2584be2b99599efbfb30658de8a00fd40e60c1f26ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-keraktelor52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f8396888490501b8505ffc11870369be6bad6a9955546c4b78fa91dc7bec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-sambalado43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613a00ccc23e2055dd414663e2d1a02a1e248085930c45d04d3e343e26ce59e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mangga96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee65e78fc3b135d7f41b4dc3b5174521bdb92ec06d3d6bd6248b404971cc888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gudeg37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9771884a3f86529c8955a9ce020fb8d850986a8e3e6adbae59c965e7f03a1610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mendoan83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27afdca92f753ae7eaf0fa6fef70e96cd4392e9137968e0863d177468d0a748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...