MAL-2025-71718 Malicious code in yeasty-silver-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5939e3dc21df82474de850c73e2c9d337892d03e4f4ebee28007bf1af8c3a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67306 Malicious code in colourful-purple-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158b37429a7213b960d9bf65fd7cfadda73e3ef325c432ced804025186d9c4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66903 Malicious code in aware-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da6ce34eb3499d4e79dfa0bb48c6ea1070ae979a83510f8c532091541ddaf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69813 Malicious code in parallel-tomato-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dee76d153cdb3635360c8258f7e0d2fd0c3147fdaaa8b9d36ab7799d18169cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-aquamarine-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a20afc405cdfe6673847f7792aeb3e4c51c8194f414acef3786a5d74fbbccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70351 Malicious code in residential-gray-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d59276750d51d23d9926b45774a427f9e0a6a40d57887b1e4a97f47384fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lontong48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6f49969a777a289a1296426979c40307287ef5eefdb5d2bcc40dbc98e7686d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-lapis78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a99d53bd29034cabe5326e975ab0a53aa268ba664a38d9b659dfe16c23608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-nasi12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ebccf82646f04ad31fa964026c4c7bf5be0ec6ab9e0b588575b4dca91da786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65730 Malicious code in udin-ongol-ongol40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6868c87bec76a161169aae5a84d374367d9d58b8a0077d9b527a509b7720db82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63791 Malicious code in kiki-asinan35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0ebc5a24b05d870321f27e90257c20b53e4119ec49929206baa61029c64d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62101 Malicious code in beneficial_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 561eda6c0d0e622ab426631fbbfae66903f6607f10db160af4c9ef741b8dd98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64627 Malicious code in ogi-klipo95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d5bb5c05f6f29be22bf40e751473527f9b7e905aa893e008b1e550785e878d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63169 Malicious code in gita-martabak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f2858f05f5b93fd3cc38b8e9ebd800a211ea7c7cdcaf970f696ba996e2324d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-rawon92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8066d65b7a1571e1b5f257848db7e192907ced454d50658b1678702914f2056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tek49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7a18729500c93387c2a5f75a36f2c7526e341d0bb10d67171cbc4643d9b40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-enting16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41ba16489f44b636b552e11dbfe7e741104bf95dd7fd25e2170355d55049b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-serimuka35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b6e6222f5abce87c6cda358273fd226cb2c543c1d397641f791d99f004b3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3861985fc030f1452a8abbcafc41c36f8ed4d8674e1286f794800c1bc1121df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63142 Malicious code in gita-brongkos7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c752378c9f772194eb38ced6d413e41131ff67e5cab20225e231863115b4efec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...