MAL-2025-70788 Malicious code in spontaneous-salmon-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2004768df0ca8c74f5bd40db3786d809ff47836f9e9ba0bcd47de660ec5f4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67045 Malicious code in brave-blue-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a3d8af2d905f4e3342da1bdd3b70ea17fe2ae13b5172149afa8c27872929b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69430 Malicious code in missing-aquamarine-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8b08d5338e89f4b16d7ad6899d5d38a5a11a812c99dc60669e423bcbdc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69838 Malicious code in passive-tan-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9646bf6982d7520b1864edb2c33dc58a6b0b9dd0ce5a06aa7202ada2dbdae718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69531 Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70583 Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69366 Malicious code in mere-apricot-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf02c29eaad01cd6dd4b664c09c97023caa50715b2a8543fb18f97a8b018c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70907 Malicious code in subjective-sapphire-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada4e2ba0808f82c43ff4bd377c7bc0eec1da8a3086c961d89ee46dc31275c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-semur8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83216a3b9c9157c594ad9b87a58f060b532c6e37805bfb3a37137de361c3339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-pecel63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84691ae6ff34672e50aff802b412a03ebfd98e3901e86962f538882754469771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-nasisayur45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdb4e7d32ecf5cbe24b9bd69a6e707236b5dd180d62a30f6e918aca618cee707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tahu79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87275fa2a2bae0a2cfddb18f8828a9d44700f5a7101e47da2e2af743c8305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gudeg53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d960a968b3cf2b9b28d4859aad63a1057404bc6dc5fc605eb7a9f23439ab917e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-mendut50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569ce7161e20f321ac90edf110eaaffea23233b7347f56f6df2fd3668e015a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-nasipecel58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f69fdae4486f721b21992aa799fd6bb29faf074899d37e91a669d22984669e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lengko98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a861eb35ae0101099b0c0de429b10f80587ccb40dfe59f532b3308f6c303a786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0487bbe4e2a1b5e58b1cad6e871986f538a7b19bb8a334efaf22ba9d4b5fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sate76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c542be8e006d940b7e70099aa1b03888ec33438fda2830128e02440a7b500e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9151196e32795661e57656049c4c153d7a9c9345f3fc0d8f49ae1c87bac711a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...