MAL-2025-66895 Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68717 Malicious code in hostile-blush-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e940ce232f8fa821b1a3606b2f419a62af50d5d09000b707f8008212eccd3c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70512 Malicious code in selected-harlequin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ef8650b1d9a67bbbf0c528f647bcc2450f95ea776b677aa1d6d9bb032a000c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67838 Malicious code in domestic-salmon-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44ae1a5fb7eefdf4147925291dfd556a78394e67a7bdb76ca2addaa65bc19e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68314 Malicious code in fierce-gray-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d38a5c347ee8ad1eec27f8fd38b04da804835f08ca1045d0eb138a247af6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tek58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea222ef62863277ad1c3eaf8366a0ee7ef631179fa7af5c7937ede16a4698cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ketan25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb7c055bbd64e87e0b6fc023051da4c920143a670b405043d1672aefe0e66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rendang92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b15c3af9bec89d9bd03e01073f3f883f842d007d5e8543724e28fefe9d81e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-martabak46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf164c908951233973f07aef2b49f3fa3bc61f274c46ff23f37b7bd582304eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913e2c1af51b1512eecfada8579cc4081ef679285c4b3ccaa8e05b32d9348892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ongol-ongol18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480458bcfba7aaf6d8c17960d26e0fd6cd29eb8ae246218fe28487dff2494514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-martabak33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46871b4f9c813b598d0ae8dbff912877fe79ef51cdbf6563b1492e9b3a8c6594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-jus9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de587bf7095793a7f3c0ec08949d09a02682c4a2328c18b13b1524e07d5885b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tomat38-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1cb33fd0f0fc2fe359d3da22dba0bad68e4f5e609d1c71c0e2e6b3bf970b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-esdoger91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28dad92a4732b126c9f1b166482c1afd5ac9e4994567a7984a79bf86f68a111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kolak54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5388b454e943d6f3f443db09c80f3edc51947baedbbe4489dfec46832ccc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-tek14-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d04c99b2771654317b5efbf4db1697f336b6bbfeacf0bccba47528166f69aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62648 Malicious code in eka-empal30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a06b9f0c19ea9e245e60ef43b3e8d0387a9540c8e2ebcadc43888863d9179b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71989b3856c9a24b6d6aa4907af597923b97c143f3cfc2bd3332551e6395e8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63448 Malicious code in ida-tempe96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a387fe12a91f40146213ea1c515bf7d11de764a4b389cfffd469b3e54d541f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...