MAL-2025-69404 Malicious code in minimum-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ae7aaedcdf92f5b530587138a709f9d4139da94ef6b34919f0672aa2795761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69262 Malicious code in main-harlequin-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1767d6a1dae8b63ee52a05cff4533172b5e22dca051ee0110f65cfcb4b8c9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70565 Malicious code in shaky-teal-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84418a37d3cd08f0bc0adc05a9eae428ea22669426ffc20718b235833e9cc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-magenta-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbe99cc750fac6d8c04139fc317efb47e14760aa6abdf994f70f6cd9b1642dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-azure-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf50e78c903357c5cf807c619cd040dbd8cb32fbcaecd9193787e6e90b189d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful-aqua-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02448f120ee0ca9d388a083c5f36a47502dde97577bcccdb293dda50f96944cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68275 Malicious code in fatal-magenta-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e8519135c730b73d1bf2b0f27bd795440e783d89100253bf1a22f1bf69b16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68062 Malicious code in environmental-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5edb1ace0966574a65cecd5e20f11c555d3820e852a59279e790ea85e41f801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-brongkos10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc256cb253e62f1df72d4697acce04d0f58ab25a12926b61d3331096d2e88ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-papeda72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9665bc58e0510fbec6b3878e09c050b27e6b443f43befba2902f7860edf713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-wajit52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24ca21f4f73f84f23e525b9a1eede51a67fa58cc4c516158da90e8be531e889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62519 Malicious code in dian-bakwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ff40cf57b2488a60a9697f6d8cb12d6fbe9923d2e734f0354073f56e68808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62700 Malicious code in eko-kemplang78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c67151f44d8a43651c96102701d225ff7d0b6dab5475a281ad94cc7059e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62783 Malicious code in erick-sasag45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0be61f3cf529a1ea652bd4c5f4f0394f60b02b6e59473c2f9dbdcbc8fda3893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-taiwan100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ddcf9c05cb1638951753c999f493d4b032220c060b2bedc4de76bb1d82cafb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62674 Malicious code in eka-mieayam55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de08ddbdb176e71cd2382391a61334f030afdd51e35a51d352968a4b97defdb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-nasipecel39-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789be9036800b743a994c61970e1fe3b6f6aab764c034c05081d7a9d84ca2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63373 Malicious code in hendra-nasi83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2683b566fb9b626724ac49ff0d56f0b89d1d2493deaa52ed71cfb087c4c502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed4ec8cd4402da95c61ff161f6f88c6c6be85120a34e125f15474b50af2a842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61240 Malicious code in scattered_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6699df875e446ebd80bcc9ecbd3efbc3fc6cb61cf66c2a6378699e48b5df76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...