MAL-2025-138708 Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138703 Malicious code in existing-cyan-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1633ea59d481983ee376978a6a2a319ef27e6a0879ca09fe7a81cb5c45902ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138736 Malicious code in frequent-crimson-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a6facfca29c6ac2a7ed67fb8d73c51fdddc074c47b5253fe74da6a1e16fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138957 Malicious code in pyonga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89509b102cedd27f8218e09a3d8eed64cd86ca9a485d41d9c8eb426dd82e179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very-bronze-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a26f5a63cdddbb9a5eb0e186b99713720a3399c3998db04cd9409bf6ea2521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-salmon-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42648f11db276a954142308546267284bec5c46fed58fc79193a30dae30dcbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139093 Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138816 Malicious code in isolated-silver-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf3579bf50d1c12a6fa36e149c314108aba643f652b64a8de0ac59cf18e589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rojak14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a7d3b129b1e0a21975fe834af3e29be7aa4d03765b11962f59562b0333d32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655172b8caf5862373934d5939eca653ef26074b4ba1b988b5fc7b1eb00a8d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-martabak39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2333af701fdad554ac59e20a8e03667f1f2233f1aa8466a5112e6d9de4a070c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-telurtahu32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a0f5bd8454128794efe7db13dcc2312a450279c8cd61de34ef68bb93f61c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-peyek67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5324b61a0ef3cf34e634b64f6e95f9de26406c43db2f6767180472224d74b175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-sambalado71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180db1fef9c67bfa2abd5d78d33c82b3bacb2bec58e1a542db040a6a82b8ebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e31a6c4697faa22918f483b39716f63fc6a6e4e2eafb1f52eee323793d0c750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-tahu5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd577d9fd2d1abc398a9f59f8201fd241c35d068cd43557f112eb2701b0a1af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-gandul61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946b5db9ea6c7b91eaada5f4db018a96acf283c58baf6822a663d72f0c933047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-brongkos42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f8535f58475f2b922a3ec9e5c63b942ab5ffcc17f15c87bcb8198299cd22e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...