MAL-2025-69093 Malicious code in legal-harlequin-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cc360feeda1b4538ddf6f00720187307bff9545511f5d801b2b33253f4fbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67843 Malicious code in dominant-teal-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb20e1e026cbf8da464926f8fa35f21bac4e7faad179339c8d380d3cce5ffd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-ketan87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02526797e98758124bd73caa82897e5a70fc688eee95cd34b29e8ad814913ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahu68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee68437d59c2876b81faff480785ba2a070546fe964a717bb9e0bd59d2ef7edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7dafcee432b443256c641141c827c4d7e4e5ec1b4656250ffd43379e8a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rujaksoto55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff11998791201632dfdc8615db4b40ddbf20fcc7b596cf5572b0cdca0f75de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63211 Malicious code in gross_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393372d3559c331cc6be2999e913209ad0f0b2a4f7b785ed202275a250fad77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66108 Malicious code in wawan-nasi8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb09fdbe337e96001eecb5a40e77953f84fff49a65486e36f507c737d459c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62306 Malicious code in cindy-telurtahu51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5497718bed9297ddfbd295bac04d158719550107fd4d53439125011c5bb624f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62742 Malicious code in enchanting_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f564b4abf8e49071384c74f0a5c09d1627a4adb2a94ae9224e9f91e987e5fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64266 Malicious code in maya-esdoger9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d52c4334cd520821da4dc158169fae92bd23a7769070a1ab8ff579ead735dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64831 Malicious code in provincial_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05429a0e9d4fce1d520dafb9f48c90c636d99ce0f934f971625f14d9533706f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2746d95247b5268d0d553209120ffb387e43ddc4577181b36222f67eb2b4070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99207b5e56caa247fdd6a792a56add4610c705180d157d2cad137a205d6b8712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-teh45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394296ba819b6f14e3897c98f13193080af372ed38442aa87e4c42fb540850c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-wajit42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b302d518dbb1025b77109a99d8c943b4fefbfdfc2a29adb6663dc81927b555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kentang40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148b7e143cb44c0ea94bcb7ddee943f1b0e0ab0a3559a00727d2be353eb2a5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-martabak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd1c7cff9cde85d97f32edfcaa664a2dc3675a1b3f1db09e5c96b3d8e2a934b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-mendut87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2535e4093f577059f5eac6e78faa0ba5ce57d09df1b8ee85a9d9f083084cc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65505 Malicious code in symbolic_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263c7a3867da045df9093a38e479bf5ed13f501ada21651d3423afc2ba513abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...