MAL-2025-71338 Malicious code in unusual-aqua-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd74cb794abd629b986c14fde81fb872c11be080fdb04f591f39956fd4b9a182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71295 Malicious code in uniform-orange-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaba48ebdaa1877eb755b7c2232081d09f2e7795cc739c33c8a192073b5fc0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69564 Malicious code in naval-blush-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c6dc2b354f24730c9f709e7094fe8e7deed44d81c5c8a342d5080436617a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66572 Malicious code in above-aqua-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63562885ccfb44871ac01f2fd066d79ef8bcde486ebb67e514d806031d6fcd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67420 Malicious code in conscious-yellow-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d241907818e89eb964c788fb7007e876ce29f7268d28706e72fe0477d0b5bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-martabak46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf164c908951233973f07aef2b49f3fa3bc61f274c46ff23f37b7bd582304eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-bubur30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221a337b21db37e62cb320b6c848cccbdd204e0e7fbe3a4a56fb630c62759711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-papeda17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d392f31aad2efce3f5ed2d491a9288b841786dfd7bd1ce50dc1d0ed9922defc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sate100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529387bc8c75bdc066ea714746707092499a0c111afa777efe565a3ee5faed2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77924ad3e57ae2589859b93649e8c26d43c6d631d377a7c105f8ac30604152da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6163437907fabe3862003c2885031f32d98a0f5388b20f67bc941b7197cdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7c8f14d9ad54e3bdb913853a33e126b2fe58ebf680af4b8036c39a35183709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-oblok42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4011c11a053a14277c3159d64fdb89ac9c6fea5eb0df246e2574dcfb2c28bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-brengkes47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af68185ab073391afde48e7119760db07e34f5eeeace901cf5ee194f8d872b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-jengkol36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae999f1f6f665ff956d2413d729fe363e7dd2087b705a4f1f99d0620e8086511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e42dc29a8fc526119356486ef9f10d5def9ab576d6fa3583c04cbdc4797e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tahu91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f672b6f8459674162b432a12052eb08770e4e6b60f8eed7cf3c317957f45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-mangga57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec98843d7908c584c15740889d5a56a7e509ef0a94046c0616f65d6a66c8608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sasag86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1bb162cba01ecd6a2d92e945baeb9b92e8845228a3fdcc9497121ad6a2fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...