MAL-2025-71383 Malicious code in useless-turquoise-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4f2f9f8cc7ac3b9160ed208bedb0818a866ca78ca4b22df75a491ae5fb7c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67088 Malicious code in bumpy-olive-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba3a7ef21dcb8ddf18d4bd52e1a63f71d4cfa85d6f7f1d171cf2ecbccba8ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66592 Malicious code in abstract-tomato-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5f55a6c2242fcae8f7e9c33d86bdbe00fa0c458c86877ea1e8edaf4151858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted-pink-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1433316c7e6e2d2d98c74ec48cc4ac2337044bbe7da5cba03d3f63f7ff46521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar-coral-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0379814a47f9dbc8e639437f8e5f06f875446464c5c017b14d1917eda7f321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66917 Malicious code in back-lavender-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ca2df1d61c834758a40800aac04a158c356cdea14d763bbcb25d8205d531b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70252 Malicious code in regional-gold-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06758af259e6d6626d1cb10f8491a23336f77051d57e610e324a4b96ad2c1bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70516 Malicious code in selective-rose-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d505e3329c83e460072160399bab2e77bf0e6d071db8c3af7509658ba28abb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69217 Malicious code in lost-indigo-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ef9e45ab44a18d9df480c09e2f4a4e560a3df91f77d7f20988fa4be97855ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71412 Malicious code in various-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f792504884d954582bc65a3b02617d11bb6a41951da2c5dcce49b4578744a7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68955 Malicious code in interim-blush-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d486806c5927decb9c67b25199876be373a69e4a86905ddf6937eb420957ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68330 Malicious code in fine-black-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541a49d5a6fb5037346092fd2142d4dbbb66fb9769192f8beaf0dbe38bf45763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67556 Malicious code in crowded-amaranth-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ae3e3bae98e5d75acb2a9b064fbb088e6fdf5a09bc8b163ace656a28155ad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69970 Malicious code in precise-silver-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d42ae136a7c3df3bfb885b292aeba9a87c5cf43e40b8b176bdca6e086e1250e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68339 Malicious code in fiscal-green-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c0a66e8bf4723c17b02503e8649d2f410b96125c93fd6997d2d569d7a7f87a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-soto78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d5eea8686e91c51ec4d3ee7d25f803362a6dce1442490cb4723cdebcfd143f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rojak5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e0da1666494f88759c542c0503d469190f4832285c77f75fc6be822c6420c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brengkes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a513e6c4f1dccbde7822bff3741fdead76fb71d0e5502e4905e57c48ea8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-serimuka10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20901cb91841c881f0059c923c1edcd93c883f76f08e0810a5c2f3745c7a128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...