MAL-2025-70857 Malicious code in stormy-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60b667e6b7ef5491c0fedd90407e11fe537c159ec954e52a83d9be246aacf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71069 Malicious code in temporary-fuchsia-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b632e80fb257f1c2632572b4cdb768e6a8aa79a52e199ea2d55649fdafda0a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70931 Malicious code in successful-violet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63da92dbeb5135c264e20c205d89ac32b94cbce4580e336db340361d3044a55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71583 Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71197 Malicious code in troubled-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a969d47b898c2b8d2229ac1602bdf5be9cf774a4ed52a6a00aa7b5121debab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67588 Malicious code in curly-harlequin-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6cd3cd059baf8d64562f5f2fbe7b79af39c4969c6269227bf48a5c572de137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-papeda17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d392f31aad2efce3f5ed2d491a9288b841786dfd7bd1ce50dc1d0ed9922defc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-bubur30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221a337b21db37e62cb320b6c848cccbdd204e0e7fbe3a4a56fb630c62759711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sate100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529387bc8c75bdc066ea714746707092499a0c111afa777efe565a3ee5faed2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77924ad3e57ae2589859b93649e8c26d43c6d631d377a7c105f8ac30604152da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7c8f14d9ad54e3bdb913853a33e126b2fe58ebf680af4b8036c39a35183709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-oblok42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4011c11a053a14277c3159d64fdb89ac9c6fea5eb0df246e2574dcfb2c28bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-brengkes47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af68185ab073391afde48e7119760db07e34f5eeeace901cf5ee194f8d872b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-jengkol36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae999f1f6f665ff956d2413d729fe363e7dd2087b705a4f1f99d0620e8086511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e42dc29a8fc526119356486ef9f10d5def9ab576d6fa3583c04cbdc4797e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tahu91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f672b6f8459674162b432a12052eb08770e4e6b60f8eed7cf3c317957f45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-mangga57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec98843d7908c584c15740889d5a56a7e509ef0a94046c0616f65d6a66c8608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sasag86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1bb162cba01ecd6a2d92e945baeb9b92e8845228a3fdcc9497121ad6a2fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440725e3def58ef60e6859f424dc63f92a6c3d4b582a6e731b3b4b480921faab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kepok63-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e84ce16ec53fbded5379e84be8c9009f9646203a8d090560daad8b59b3765a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...