MAL-2025-67151 Malicious code in charming-gray-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e477fa9b0b8142be070db36745801aa9c6519d137a00f924f5c351eab1005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66727 Malicious code in alive-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77e7d433927058e89b625011173b651f49b00420c6ab3784c5548eac5ba84b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71651 Malicious code in written-orange-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7da59d6418c8202629ed2e75af9d079847539741f76c3cd6fdf1eaff0da951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69877 Malicious code in personal-orange-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91befdc951bcb3865524374debbbc76f2c41a9814a391f4188d4fb38ea4ad31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bubursumsum39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595c3a7970f8ffc9512a145d852653646264a4a70d0049b47c19f0b9815d2252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-rujaksoto11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7784c7b3a2782ed9b0d4dbb84314cb7db8f0be1ccc3b0fcd9edf01ae824b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-martabak9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc10fadc01af15a6ad087a982a57a48e5988946dcac472b4c473d7c19e6875e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gaplek51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d006e4232b423ff962a1c326a5e8a050de0508cb16eb7a6e366c5fae7c3cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keraktelor78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2c57d232caba72cfb03d4031b005a986b227e924a7ae1ea1cd290b81ff1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-serabi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1035ded713f6033b7556466d56f56780f275a37f149ad7ab551fdc8b8bc777f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c74173ff04b8a461d1ab136a475cb9c8520f592711a7d6cc762c26e5e51219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d0a9cf24323da6fb4a40d687fa39fd438002d249b2f3564643372a154b6001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64108 Malicious code in lost_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b8e5ccbe2ca5a77fd456585fa700cf33df38ef2b1f2065037636347ff6beb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64790 Malicious code in patria-serimuka24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97d83e14cc2be839e5be9e84e9f5d3fd50e100e0c2d2c4303d0dee2d0f74a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65250 Malicious code in sari-saguer73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43c84e220824d4f30a86f49d79d26924affeec9e6f5cc234456b7248ec08df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62278 Malicious code in cindy-gembus73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794757d949159076d68b6ff6157a214b163f439b65a1d47f7c56fe2702e7d76e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63043 Malicious code in foreign_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605cb99e6f94cd12b5c2bb16dee132d72f4432430c9f2599ae7dacf3eed68752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65546 Malicious code in tania-rendang65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae64bf7752a5cad93b41ffbf61461158ac9899f8e0ccd71d7cad157c489766c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64062 Malicious code in lina-wajit49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d13c86cdb3cb26fda124a0f93eec029895915f5a2cf63b8ab4a2d497ae5003c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64177 Malicious code in mahesa-ketoprak71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5ae2b313ef3d810fb58e4031530a6193c3529d89f4fc2f2388ac85fdab13778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...