MAL-2025-69841 Malicious code in past-lime-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659e2ba882235d2532b00ca64149ff3a63128478bbb91a7e0955e70aaf992635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70434 Malicious code in rude-brown-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474b2e2f1329ddf5df1564ddd561454e5c86fff96a87098c4dffc880ecef285d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70160 Malicious code in radical-gray-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffa2c14f9d3d6661af4107f81c2efd9f50f7c9585ad02aaafaf99e808ec35c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71736 Malicious code in yodelling-scarlet-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386224ece11d1f49485404fef7619030ef0da3f93a71eee5a0b9d2ac21b39a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70848 Malicious code in stiff-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0eb369be696eca3294e5c7bd646b36bedda460ddf2dfc2a325526001a5debe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70096 Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68545 Malicious code in global-indigo-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84bd80928a69ea83e9f509aa2a56e785d5305d967cd5cd21241a08bb723c2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69047 Malicious code in kimyoonhyeok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f409f0948b05f83e888b8fe267cfe72a62d4f880b05b893dc08281f16aca6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70869 Malicious code in strange-turquoise-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efccd9cc26c1c59aec3842cb453f94a074ecf8697af5eefcd3d37a0062acb402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68030 Malicious code in encouraging-emerald-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26138100e7ba165d9b1a63674836349f51c9a78f9e615103da550fc7ebc9e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68036 Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70257 Malicious code in registered-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807a307b323b28236f1e04d5a92d8ca00fe65c41cd31a53af3cb400d90b819fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c199759f8ffe7ee19da7bca364c1ec2203e4de0a6e642ce2b0eb248e716cfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-botok17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c99f4eebd3ebd38322de728cea7b418ddc1c6c84618366517e5198f2bb139a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-teh87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afb0b2f34b1886b07edffa8171cb456bc9c73527a2e431d7cbc873b7efa307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970b12d1c77cdbd152d11726d3a880e63f1218fc8c7359525bebf66abe7c7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-rojak76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926bb101af40dea04599859a3803e4152a2941a131b6e3bb7ace4c76b57bc9e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-takokak91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffb331edbde830bd2635c3949310bed522554604e8ab983940f6dc5971413ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-sambalado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621a5805e26722bfb216d17f0e4092d87cd6c8f0f1d094c74613762c46d7ada1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...