MAL-2025-71038 Malicious code in tame-chocolate-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1efd451b7d6586b94559ee020d24000712d1d6ad5db07ef43ec82086b8bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69828 Malicious code in particular-peach-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1236dbac1c19242eb6d0ad5e730444418262cf9656438af3a06cb827397c8e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67073 Malicious code in bright-plum-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a28efa351aef74dbb07c7ddf4f5c231b701adb5b7c7d750c5697a70a3953233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68565 Malicious code in gothic-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0b313d0ffc1eb6900a80f71a4af5586a4e74e6d7530e47c50936f17314e221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70006 Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-azure-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e3e95b1e91c3261855f3f67a1388631e972d69797dff87789b2bd927a009d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-jade-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414886d8f2d9e4a3c107c7603642138a6dd93e6cc3641619d681d25197a97b57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tapai66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05215451d09a47664e3de366b2d8a9f6870e97a101a011625ccb431173649e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brongkos25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea50adcb290c9fa7858acf9a1ae8c04abc3eb878a2337df5747a2621be48eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c5b1e8864f4be5bf9d95ab08b68529a29f2b686bedb6b92c7828ce40a1e62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-takokak43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8ba52be22cc95900305b475e661c8407c37fb39c13cbca683bf5e05b82832f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65690 Malicious code in tuti-miemee95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2701e67605c770a7317aacdc08e3869f36b3a9e6dd5dfb138e2dbf5f486877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62100 Malicious code in beneficial_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fdaf23a44213bcd85a289af349a0dcb33da56f34bf0e03e5c8008d9a92bfbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65017 Malicious code in regulatory_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca332df57a9ef7f42eb1b824340ecfb3e651d240710797b652258ea96b37f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64232 Malicious code in maman-papeda91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ad3dc4506df84a0cd6edf05a5bdf5d67526b4e29b4ff42faaf07dbd35306a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66115 Malicious code in wawan-sego78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeafcce73c59920bb271cb500fa2def71953462356f9dd80b259ecedcb448a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62549 Malicious code in dian-rangi45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f9754229468b05fbeda32024433fc45bb66e126ddbdf062be41ae1194e5e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-klentik21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 631f7d6188d9157f64c66177abd4dfbfb82c25a75d937e228b3134adb608ef76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-jamblang93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfca73dd476568df829ffc3d7f241ae75b73d3676f8266eb614725b4fc8f0a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...