MAL-2025-71352 Malicious code in upset-brown-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62a2382b1b0d1d4f63b419b3965dc1227c8807ad95d938b02750f3f19bd4c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68663 Malicious code in helpless-ivory-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c076ce1f3ed7ab09274e3630928c51d4cf51ac9c1f23a6f73e5a8e95408601a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69295 Malicious code in many-beige-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e5004340f1c5b3664b6340ddc594821516f76a2a22e1855bb11e7d7cfb470d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67499 Malicious code in corporate-scarlet-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7a529d122ca29028d6d1a09d3dfab7446b9d8364c524b3f027aed8d977beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70382 Malicious code in ridiculous-sapphire-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17ebd3e2509d0de3aa3369c7e819965ed5cd937df53c8fd552e89afd0229170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69957 Malicious code in practical-tomato-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2633e7a9d278562971e96f470d33db2791b9ce1f4af3e99d64ec960c8aeab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68567 Malicious code in governing-amber-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050f23d03776f0191dcebf0da82cb7e63a8324e8b4ef3216d720166738409510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lepet50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f759bf954ebce69fae7a6f008124c6d7a88af139da8ae897d659b94089404411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3e2dab92279d96523f7b855021a729d0cad8dbeb1fd5b23f1b37cb422babe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-martabak54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d7b91d18a7ed7af5d239d85c975552a8f9363ce4dfeef3ed78e3e6cb25912b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-miemee54-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d9dd50a957f9d2b1289763421a34a77a335bb943c2f4455db207d5cf0a4997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-rujaksoto80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd33bbe9e58cc8c4bc121bca17b1ced02822f0ddb3c4038e8824be712e34b738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-miebogor60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb2f83a7c99350a8d1927c84a32944a0a03b73f8a59c536f9d14542826c71e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tiwul95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71251992a36825a32afc95590190bc31623e91713be9f004f60946b2090bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-soto13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b72830c08949f330033be06f05905b1d3b8e4909674a1c420d6934e2353446fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62187 Malicious code in candra-keripik49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d9d49bf745cc0ca76be126c23dc60a9ad55b7a51b37c6be4359834b6b531d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65342 Malicious code in sinta-sate78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03f7e8b37647d0225e0b2775a8adec9f9462173160b39e4e1673a68c05033d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64039 Malicious code in lina-moci8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c281e14a7413d07f4ff68f5cbc94f950f2d62a12b3dd364f7beb396dbc3c596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65108 Malicious code in rifqi-sasag88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc384bc2e44ca22143fb8a2539b3a5fd6d70fed4bebd1006dd4e3d76f22db482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64862 Malicious code in putra-ongol-ongol26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ecdb16fea7451e439b20fc43ee6284c5138d7f5727126f12f7f7a31d37f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...