MAL-2025-69252 Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67096 Malicious code in burning-red-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78abaf0e74f03764c4be1c98482848d5f26cb929a388e30220270ba69ee13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68083 Malicious code in established-silver-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836d34f20337b06e3fdc40be8f2bfa1dcbc1c88f886699694eda223ff8f5e2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67202 Malicious code in civil-copper-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c59dd53462a2382ad124ef711312f510ee99617dc31f1afac4504567fef079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67078 Malicious code in broad-yellow-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08b76a383ef375cd50953de58c44b6dbc59c5275aee7b4fe163aad27f08c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70617 Malicious code in silent-purple-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b48ed2a9fb10cdea6c195d89f547236e68a613b0a14d5bff04e0c6752700815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71207 Malicious code in ugliest-apricot-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c14735b07017a5cb8c9b7c19d28bbe1809b24a9dc16a0e0e5da411f1361197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67798 Malicious code in distinguished-azure-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80d114818626d16882bdbe142903a5ba9bc686855231096634cf19db7980cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67698 Malicious code in delicate-lavender-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ebd5f6b7895626148808abcd74ff4e91239dd64c538a86ed7ccfc04b1decc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67111 Malicious code in capitalist-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6d0d57300ef72003c318f75d9e83d3482318e2be9c902f77424f24b90f0263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-buburayam83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34115d80d44adb9e7668f1ffe7fa9148573af67f5e7de2ae3db54ae2596e1264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lodeh35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e9c5e89eeb84be78816f995d057a25c84aa497e93c5c8dc5f00df740dd315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f074651f9fa038810771c48e0b467259f33c07fc7757a1e5369a67a46ea5fcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-miemee99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f02d5d770779e41535076f091705b047cf4805e75e06550834e8b4dbdbf5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9483f041e2c5ec8632141c10330ec2b48f1b1c8ca2f203db14feaffc8e9bf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-papeda75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53e69866434b0d169db4424d4350b6e64a54310ad0367ee9268f03806c183cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mendut5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd916533008818b38520b4804cf9c72d2d5b3e0fdd50a117adb60366ed341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-mendut62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a348ac970d6503fd08ea87696959a63c161d1a2c3f47aff1e6ed6297292b1bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62450 Malicious code in dewanto-lumpur92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4191dfea0c5db62716aa3d861007278d222b6916593b5256be29378aa53819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...