MAL-2025-67892 Malicious code in due-magenta-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d07851735986648d4b300a02275cb3ebaea9f5bac02411cdf730d69f3fe57b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66622 Malicious code in active-indigo-badger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f138c7efe7ed6e44967cf5bb3e084c6f503f52c6e25639e75a0e12580aa77e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71507 Malicious code in vulnerable-cyan-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488a0c4645362da803dcd49d0150e928b43fdb914045f97c3ba43c7b8a913c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering-blush-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77548b3dde2a4806d510daa9be9d773f98802cb6094a57076533ccfd6cf61aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69853 Malicious code in peaceful-emerald-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7d1055238bddf6b8e5c634e55154045af3b768eeecf935844aae03f24759e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68394 Malicious code in formidable-beige-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e613d0b91a00fd09848f3b591c616a3f0e1ea39c51dbc6f202556e7e7c3779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71236 Malicious code in uncertain-ivory-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3a35ca34ab638b5e395973e27cb4d739fd7df296e89afa7a2028b730e19294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70570 Malicious code in shallow-salmon-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89e41d14d1104bf47910d4aa4554012befd14f51d84f63d59e3db9e69f8d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71132 Malicious code in thundering-lavender-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b8f6739568d997ab7fcb664537dba186684ad750f8f3ec43afa449b8b69b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tumis42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bc65f32b94b1324243bf93fe559e06fd99a069616b369e766b3849237ccdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-serabi60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44bafce7c2b2c55e9c4ed941745625f5b8028f766ed3af00c04bb8e967fbbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-oncom22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa93bfd405d4c2df7a7640f77ecf1dfb4aa5762b4a3742409e248fb0a2ea97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ubi51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9babf55a13fc1c8fb8e1ba402ed9450462b6809a07cf23456803539b8d72c67a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-gorengan53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10e1be829fe749acab943b50458027f0d4dc2d49bc6256d87abf187600c94d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-klipo77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d0fb611f728e64f94b6433b9ab3c7a9c79cd2f34264e073ee5308bf1239a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-soto68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c99f9dbf74da94bebcecb4a731cbc272c51327c401a9ba2bb0b5b3239993fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-gaplek61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937408c80186658c11a68fb6e61546e447107e9a3b4cd2a2c33070aa7a9c89f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gepuk72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6252c8e49d1ae7fcd93222da88af1f4668732db8d60ec04eec092d07aacd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-mieaceh39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631a96e47e035e297f813a36f6b9599880cef6c3057954c57652002a59c71c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06eeafff73ea62560d79d91ad7d50190916774b31dcd353b5b32307781149151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...