MAL-2025-69229 Malicious code in loyal-chocolate-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c78aafe60d51c46f2d6020db72b2ef107eda61abc83946653ccdb494f9c3d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill-indigo-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b30cea900f1631201a6a311183ede185a9365548fd258fb64cdd5147830b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67644 Malicious code in decent-amaranth-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d41f6fb67e22f864c809ff128842576c012e408785ec74791d49cf9e412925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71246 Malicious code in unconscious-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d420ab563d2cae056e32cbff56b7003246fd8131451a8c48ae50db4af0ec9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63812 Malicious code in kiki-mangut2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a834f0159fb651fbf3233c4638c12535d537da095c24fd87851fb85a963420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62720 Malicious code in eko-rangi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cada092cdd6adf2ca5011da61b197b48cfdaeada224ab8187f2e29041fdb136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d2d837676d971a773968bbe2839b3df644db2aa3b57def0eff31ace7fa56b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62803 Malicious code in erwin-kue84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf4260911789c15b15ef806aca5c8e00fd2c79db3ba7ae1369b03a6b6752865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in normal_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb36a883674a5caea611ebdc65cdd809c8edc2e88b8b7dc4f5dc68bc0af084b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ca760d717fe57b218d6c97c765c88b67c669fc00d2d808e2817c1ab4d6671d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a7012f8230c1ca253c3a73a80e192a1b3d583b4fd41a9149ffe887653b8bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6ce0c773846b481d8c2da8e4ca3af079ae394b3dcd70ab88b9703564be4005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e2caecd68ce588e8490f13d9ca6a998bb1d2e827f11b6aec8ce1af9c8a1b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-55476 Malicious code in budi-tempe50-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e981b37913d12187c71e8d760ea11a784e93e5d4d0af4e86fac5cee78d8da1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58250 Malicious code in putri-donat93-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ad2c09c9664f74b8904308ecabd0fc1d1e0dc2dd6e4d5daeee0b1645257320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57353 Malicious code in lina-getas32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2611f54ac59640f5ae80d399d18b7775729c7154fb98f445e5b536075f31bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54289 Malicious code in putri-bubur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0041736adbce980c213e92b17e482a0b0cbe443f3ee8f7890a03fa70de8115d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue75-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec7fad2e0693c4233dcadb30da72223f0aad6b36c3db51b87381e10ae5be51b6 The package utomo-kue75-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...