MAL-2025-70104 Malicious code in puny-yellow-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47958ce0e75f0836a42722d2a4a958cce61920b0bf8257d7a503ff10d79786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69549 Malicious code in natural-ivory-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d3a96c0f8e2bf9a3c032b2644c04aa55e31ac0438a42419aef0370e4c5246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71122 Malicious code in thorough-sapphire-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100afd0a6c7b2174b674b1379cc1e9d95d18088d20eec9eb512a8513d2b9b075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70336 Malicious code in required-chocolate-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11de199fb725cfa12229b8e24315bb84035439be1e175af2bc9f5c121d56415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying-green-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c908dc2e8c74a5abb2de9205fc910e1276ef474ba1bcd9f96291bc977342dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71095 Malicious code in theoretical-ivory-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599224aadd0a6283bd4798ebbaa9185df72af0a0d51f4815c25e22bb4c38549e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-bakso13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7c9a3ba351320675b3206e52808f4a1e415f039876bfca87702b6a1d8cc6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-jus4-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8615a01908a28d6f107a3d4c886b348761158db21b9e502c4bf35f902ccee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-soto23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0eb1f56020cef39298d3ece041973380f8e39be81c56973cb3ed7f506097d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f20833c21e3ea97280ce936a7a7f937105c02b34c3911d2ca8d196f4957113a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-tek45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b36dba131d43e079c90db4da619a9f9a8f607622f0099d1ebcaa52a18b86e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b318d92b037adf03f1253367cfc49c657a36eb1a769b71720c1e0472b95342c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kue34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e202833aee7840e861b6855b1f74ba023eba5dac92aa48f7028169bd89892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lontong50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424607e9e326fc253c5dee44efe1ba835fb82a0ed30492a2fb6134437c227fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-peyek45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0a356ac95093b87dee8924c78deea789d5e8b0bb1b0266edfaef03fea063e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd09a76476c359b88abebb70c21ffce67e8f9e0638684aa1046cff9937e0d225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6d67bc1fc297042e8576bd6cb462a8bcc0ddc4fc2f59f92baf57e8981fec37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-naget97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f676398d2e510a85bb8b4a8fb0953f80eb09d5e5e0b649bb72987509c13a2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tongseng35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3975dbeca3e4beee3510adc856ac36374fc01b41161952fa04c764b4092c3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gaplek7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89236ae9bbccdbae179d14f6fa45096e723cbc73e87ae2282c36970bc50c69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...