MAL-2025-66756 Malicious code in amateur-beige-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc563ea8d1faea5faaa6e82fcb084d3be7be93bf34ec73b0787f0a81d8537f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71753 Malicious code in yucky-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7141bf8adc65b4424fe3783dac59cc35e718e084f8e457abe6630b234b42c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peaceful-red-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391d5f5a1f26d5f7ea625eb78fafdb2859c3af95619a60b1a328222df491af99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable-blue-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c84da9d976fa4a8147489ac082fa2e6f59b9b59d22d1b7c6380626200b3576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial-black-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d2c2e4fe62f1fcc86d213c43f8fcac8b6e5e02e7338212ef1500ce5bb2895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound-black-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c564ae7e2e35e2060d2ca9b296323609515215864bc3a6cb6b6f498983a9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprised-gray-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef79fe8cfe0b4a72c5015d70be6b83e73d78e0fe38ed0962e90ef1072efa796d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anonymous-green-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375150b6b96fce2830193a2ee0398c39f6e18a1f161ba2f63f0a217bb9bc8f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest-green-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7164225fd77f6454cf2b85c921239517b0e369ffff4b7ac3efebe665dd3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast-pink-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1be636d66855587a1fbb72809214bace30d2be66e256de438ad991968c2a358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-teh87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afb0b2f34b1886b07edffa8171cb456bc9c73527a2e431d7cbc873b7efa307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-empal65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb66cf3606c4fc3be7978ce57448620ef9f3b835afa04aa60272694c8f6281e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sate88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29403abe5312a7eba32df608dba8a2eec59e99ead0787c89558b9d26d9b458d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gudeg75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a9b9748fae836a8bb92d26a2fd8310ca238da8df94ebf25c9566467637df2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-rangi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4575b1196427af25c1caa46c1f86ecf877ac2dba3c69ee7e8c22dcc248f251e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-asinan54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb5ec680b2faf5b977ce1cc2a396212685000b94791784fc81857159dd79107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ubi61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e697919f8b184b5d9d2347f600457d3cacb34f4e6f15f3f5f983e9290a6cfeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-rangi1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eac81a8260215fb792d05e820a6336ad851d48a8568fa2249ed8036c7db3856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66342 Malicious code in yanti-wajit12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a4b5e6276a0e91a4f0126589525cb8e2b69224038c6831cb98b9eaec4831b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lapis16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7c7b101aa0c3bed6e106e384fdbbdfca3e2558871419c104d64a29a7c3f9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...