MAL-2025-69538 Malicious code in nasty-harlequin-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2d71d5cee5b1f092013b8e46ea6ba365d5eed5466ded9481e2a9a0e59e6e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70720 Malicious code in sore-crimson-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68823 Malicious code in inadequate-emerald-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e815434667fcf5dfd5df390db2707614adbadd56f7a71f9b0da6a63f1cab57f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70499 Malicious code in secret-beige-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca5ddb2aada85d6113bba08ef4b4679c64b0438db20e0b9beaea61b9fe7a900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-nasiuduk64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 354cb1399c7ddcf731b76751223f50d1f8a73f9b5f389cb9cc591d343053efb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-gaplek68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424b78d84140b8e48b0375fce846f88268f12247103ef0432044c6344166b67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3e4ebb73f50ea73f69acf4f5f8a1a9b767407191e62d1fcabb31d259753ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-rujaksoto37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ed4efa3c0bcdf4469e1fdc632d86af5e52f324ac9911cf00840304615779fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-naget100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8a13469c33766a03f5f1d446d874b91ceb15026236cb99ad5a37fa4c5a2e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-asinan21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbca6a04a9fbf2294b8936b6030c7743e78a32416ec6a4a2e41f16e891d85723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketoprak32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd89b21dd7ae859caba605906ef4334d7657d051e8ae091b63419f8eea86f7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c4f503fe38293ea691976918f34d6411b086ff0e6f14ad2da8f9134fb313ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb6ca7a5f7c80e1311d5c1a8d0cd4d77145096754b6621a06c4b9783326fd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63045 Malicious code in forthcoming_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40896909ed196d95442304822900916ff772064555213ab400bf39dc17d29fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63909 Malicious code in kurniawan-brengkes64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e617900d116e96bd558de5765fa3d0c435e0efe55c23988a76a1a74cbc0441b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63311 Malicious code in hanafi-klentik32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a855639c2a7628d11568ac93f6a203ffa13b539cb441c276b9e9c6edfa831a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63818 Malicious code in kiki-nasiuduk81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5171186165fdf4b8d2ccd6e73857fc667e5a9a5fd1bee7b6339a31af4e25392d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63697 Malicious code in joko-menjes38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d5443a444b6058144f0e29d4aabb346f161f74d7c1eae9776144a5363e7c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65706 Malicious code in udin-bubursumsum56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd57f3b78085b84932d43b94f8c6163604780eb9a3b037b63e1aff85bd4b4d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bba3e2af905345e22ef2e8eebbe7e56a3ddc122f886fdb60234469cd84ff70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...