MAL-2025-69505 Malicious code in mushy-sapphire-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df187e1dfd4aa65c6abd9ae0ed50860dbe1ea3992bda0b28ccb20b94a9a80b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70719 Malicious code in sore-coffee-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653ad8bbc54bf5eb77dc6dfa2bcab629e5e3875b5ed6edca1df603293f664d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-sapphire-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c545ba8efa110c9e44276a6563868bf85830f4e4eeabf044b2829d6423149d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-coral-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit-blue-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892323eebce3f6875acbc6c803a1b0db1f06ea05e91fd1822687c6075bdd45e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-fuchsia-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b523b11ef7c4e06847961e09f52301c51425feb96dbb9ae49e3ea48e6126d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative-moccasin-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d9357cd3b173e26110bc01335c184b691aab1cf4b2aa28c4eeb7b8c381c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable-tomato-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c865667f7aa79c8c5377d38db9281943b1e983daf9e4926ad3d6ce2f9495de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70883 Malicious code in striking-blush-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82967994aa1f8eb88ef89ad632693f33aad080c8f57ad34d7caef522866db24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68658 Malicious code in helpful-plum-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a91e6902b33428b341ba356a20727318d620af836d14e4579138921d12e108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71627 Malicious code in working-salmon-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b84454e10ffdc3062031556494bbc4d4a183cb35f58f19bc1f7cf076b8a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67569 Malicious code in crude-olive-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82650962279757424e75119d3d4d14a2a6eeb507110d5b8156454af8e65cfbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67381 Malicious code in compulsory-maroon-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9a4a81303341217ccbcc2e6ae38058136d17c206f0af4539cd32c6a42211b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801478fd8dd5ce7083e8e7e2f6fb5f113081f492db943b1adf5b49c431569af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pecel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addf7b73c6002486e8bd016ff0660533890553b31b1958801bf4babd59bf93f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bakwan39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f59fa8c1be1d145376b9413d4645a840d547b68dedd8ea982489ffb5137d6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mangut67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871dcdfed000f571b3fdb067860c94c0d9ce0321150df730fd2ddee9b2335a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lutis91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2e8855d93752612d05b4046c06b30cf414fa52e306315e12092ff5da6cf78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62354 Malicious code in citra-wajit99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b85838d3ffd4fd1d9b0226544cbaa488b909fa3242445a104531e571e93d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63219 Malicious code in hadi-empal65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41edcec99b9d20d49e89c0c5c333e87b0a0b239e8554390079b73bcb62627285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...