MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candyulen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3523c9b11fad2c25a85e8efaaa45df99c0226765ce346fb8b5cd662a23e34926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable-aquamarine-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a53a741790bbe7fc2fc0f481f043978f77156853c973f9bdbb32c9eb6b8b68c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80713ac28a0a287d70171707490645760a9f94c8c115d9159082276af4f8e802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard-turquoise-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a89cba7a6c8ee6a1100746303a1689f144704c9d14d54cc3851aacfb38f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70788 Malicious code in spontaneous-salmon-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2004768df0ca8c74f5bd40db3786d809ff47836f9e9ba0bcd47de660ec5f4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69366 Malicious code in mere-apricot-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf02c29eaad01cd6dd4b664c09c97023caa50715b2a8543fb18f97a8b018c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-silver-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafebb5b601c22818afa0839aa51ff3d0d9c9d2b19fff756051b3c9c6acaac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70574 Malicious code in shared-gray-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651fda6b3b6e3ab7abca40dc135408b298dd8ac1943b33f5a069272538df2489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-lavender-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 178f448fcfba1d0cbd2df21d0d731d800c88dfb9c320b74a3ace4e0f76947f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sate76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c542be8e006d940b7e70099aa1b03888ec33438fda2830128e02440a7b500e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94770332c555be144d07e0e858a31373d463ae0a93d8d99f9c36317718d78d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b1861fedfeacff81bd60060695357cc78e9f211df06110e381b5d6f07a9481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ee04476d39e5aacbb03e7fa96fc02f2a579aaa912f6ae34421b5b389b0cf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-moci12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b81e9f401a74d2667d4f47b66a9dc66378ad0eef781e1d7cbd6f003e536665b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rujak29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266562350188ca3fb8ff061aded5187b25a1ff2523fbb5d0bea27f7fe402596f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tahu79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87275fa2a2bae0a2cfddb18f8828a9d44700f5a7101e47da2e2af743c8305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-nasicampur15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f83e605fc88ad8fa9ffd28190fb122b6b2aee49fdee042860972b45ec90da4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kue35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de621d60d98213d90c3190886f21e916031ca0f88d1c04a8035ff24ea69c0fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0487bbe4e2a1b5e58b1cad6e871986f538a7b19bb8a334efaf22ba9d4b5fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...