MAL-2025-70742 Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70332 Malicious code in representative-tomato-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1431ff863a634e38a9ae59402cd50dc17e59c950c7af1153079e2a0cfcb5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67603 Malicious code in cute-moccasin-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b215114b24cea060a5d43e004890d685bc745ed9ce300037d88d972ede69164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69804 Malicious code in painful-ivory-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6816ec14bac99c4e69dfaa028f665a59bab11c3545be6d0d45b4a11637d16b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70428 Malicious code in royal-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c341bcdaaed3945acb51c1312b486e22ffa89bfd0169328df8631862d077bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68011 Malicious code in embarrassed-yellow-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ff0fa496bf27bc99cfec9ea3aa1c8b49f3f56eccbdf553f56c7856ee5a7602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-mangut55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087f634df7f4279440d9340a6fec96a4ba7ee05da5890a5043ad6a670ba12ac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-semur8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83216a3b9c9157c594ad9b87a58f060b532c6e37805bfb3a37137de361c3339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-serabi6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a778ac01a0217f62f1b3324fcc01c1e474b2c6231174f70684e4ec12560bb6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f1d2968ad44dc5cc2ecc5ee7a7da4a0778ff700e1b89689397f67a3d458bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-sate75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f9af64ee9f5b03ba859caaefecf47f9dfcc6457632677af89c30f50557568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kue89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c266509e79b843cd9717b80f0eacecaa20ee3bbdd3774e33901f461dfaabe21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b96910d95cb9eb6dde31123e914398919e4ddd54a6a96dd24803d16af5f50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pecel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addf7b73c6002486e8bd016ff0660533890553b31b1958801bf4babd59bf93f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7dafcee432b443256c641141c827c4d7e4e5ec1b4656250ffd43379e8a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-mendoan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d701c0358461c315efa5b276a148f7955c0aadc34240bceb019c22b49f5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-naget43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2508f13f6b83d2448532e4ec00ae42f5904186b6ee1dbec2785e4e23b9f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gandul31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db4a13f4f1d6fbdc9059204e16b85f3b16774ea96d7ec08e79959fddd010bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...