MAL-2025-69859 Malicious code in peculiar-rose-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8942e3c365695bac2fa1414374723f7024d3fec91ca529501820bd1ffb1576ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular-white-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e330224b92cd1fd2ec49049fcd319e50feb3476ea27322623a580bb948b261ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-violet-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c10d63ea276af842ef6f8a69d4035ab571ca02740b3a7389fbbc26f57baf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-rawon17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed71ba9019e7f8c1c8229b8bd6dc9b44c6c0649d516768c0045c56a5f03c4810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sambel68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea95b5e682af85440590c2fbadd3753558d823b6741dd0070cfd23c5448fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-oblok8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1e9e3fc1258ce1c2876a169896a14baedb74a4ce10e0578ade96b96a1becea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64114 Malicious code in lucky_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d63053906ee121c118985ec49f4f93b1488b2346bb0ee5a07630fc1166e1d44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66072 Malicious code in wati-mieayam1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a20915136dfe3815ebfd3ec568596f5d79c93c9825f3364a2bcb2a93794eec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2a69d1d6d5667a72809e85918abeb90c4ee9eaec48d016e7d84787e4b5d9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62849 Malicious code in excessive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf09b3479892c9b7b594ef95b85115765ce2c54cd0c64265f208d912c0ecaedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66130 Malicious code in weekly_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62734cd7f179833b9bcaeb8246aa165b31e6f97e3ebb099ab2b595c1cd82c8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65071 Malicious code in riana-tapai28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d62be1ec72e4c5659b160e77d91898daf146dffaf2c75eb6342d3651ad2499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-takokak28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c359e99f428ab1496a93d15e644c7ed6487b7fc3333d1d98a723dd49b4f9fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ragi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e3773d109184289fddb333ecba7fa2ebcc8f03c98d2dca031372ba0b10fac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64959 Malicious code in qori-donat91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89081799ff2fef948302280a2203ace28a7b1429a73746763909a146c642cc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62109 Malicious code in blind_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf55d3be2c07b1c760eb867ea40868440946eec5bdb38ee380c2238fb094f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020791797274c140ea28f2ea15f282d56c325be2493d461efa5daeba16066819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab85d36067a2d950615a8e61c1153c64f18e35d0f230105a2da1ccee1eadb706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60913 Malicious code in narrow_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c6e86abff587fb8fae5c77fb0baee5036fcbfe020be864dab209ca0e6bab3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...