MAL-2025-138969 Malicious code in reduced-gray-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9d753bb45b96b642110c54a028a0db2a9d183fcb3f140c0f8771ab3e61752f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused-sapphire-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facccc3d60d6cbda653a56b9fa9bb0dfc19cef5b28deb7b6304179b1b6278c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-white-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e709f6ad7403eb48939931742b4a4b1e9e734e09eacab6d321e561d29816952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae4df8a9f707910bba3600a9c4c168073fe696781efd8629e71a5a19e63c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy-tan-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b02340b5f5a18bb4e997b746207911386488b2d4c1eec42155d7a954bcca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138668 Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138848 Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-salmon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a442488ef5caabca8bae9b82d2a185abf2102a99144d9978ab6d56435bbfa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139081 Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc966a70182c7321f2654036f84233b4189e7d92d6577066b41ad7a9c2d577f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02ed34628287ef882a6ccfba04ed0b60bcd305553760182e74f799a55e511fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-klanting8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421e4223980bd7d219f845de37da907df64f1874ecde00a00a12f9380528c087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kue42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140ab6ea810401f072784f6e7074c254b2032e40852cc4aa7aeac270f31c49ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-rujaksoto9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4ca93594a034767b07bd6fa04a530e303a2d230c7a28a873e24f4b4fff296e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rojak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b06dde7a22a32bb98346156441080e85128ba1d436a686877b4aad0f1a6d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kupang61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd499d282947312d3697e6399edfbdddac7d5b137f3c9d42c07c319e3ff8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-miebogor56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f133a56fbfc81da35c3aecdee5add9f3ce7ba4159295d3a1cb532a02db348f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-ketoprak5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51326a68f1ed07fdd74f321359634303be4f378c08820f26afc05b002d427d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-oblok71-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e235b6cd962d60bbe6a5b6493c33d387983271fd12c6e1481dc8de0cf9e3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2a73c97a8b2c19fadf07b3e601bce023e0bf5621e3155d64a3d325a8593777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...