MAL-2025-68910 Malicious code in inquisitive-coral-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91be5abd2cf841a896ec9f58b209ebc1c89202982c109684f33963f2579e70fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67603 Malicious code in cute-moccasin-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b215114b24cea060a5d43e004890d685bc745ed9ce300037d88d972ede69164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70742 Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71772 Malicious code in zeroth-pink-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f86afaa6f6bb8a17c8893beb0f3f93ee604dbe9dfec6dab22673c6cc822be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71018 Malicious code in symbolic-apricot-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c78f08ccb9e0fc0cfff8c2e0e45aec8298abdf42c1e9e605aad30f99ad9270a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68011 Malicious code in embarrassed-yellow-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ff0fa496bf27bc99cfec9ea3aa1c8b49f3f56eccbdf553f56c7856ee5a7602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67455 Malicious code in continuing-magenta-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e07a1fa61a98a2d279c6bad2c13da7975120e82dc525fefaf790e83f1d0fb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rujak58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8600fb59c078f8f73559a480eef9c4c2456745b34061fed528a8a1e7dda63793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf4260911789c15b15ef806aca5c8e00fd2c79db3ba7ae1369b03a6b6752865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-semur45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c602eba1878206942d2ea98ef39b2cfdd93e225f7cbe97fa91b578a97e6a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-sate75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f9af64ee9f5b03ba859caaefecf47f9dfcc6457632677af89c30f50557568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-pecel29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c4508c0655bddc4fc29d96d43f68c8b55ae5952dbc70856e05ff866dc92ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f1d2968ad44dc5cc2ecc5ee7a7da4a0778ff700e1b89689397f67a3d458bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-nasicampur15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f83e605fc88ad8fa9ffd28190fb122b6b2aee49fdee042860972b45ec90da4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-serabi6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a778ac01a0217f62f1b3324fcc01c1e474b2c6231174f70684e4ec12560bb6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-moci58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f11f1734452badc6e6643966af9bc74174c95f87bda4af5f67c59b545270be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-semur8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83216a3b9c9157c594ad9b87a58f060b532c6e37805bfb3a37137de361c3339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pecel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addf7b73c6002486e8bd016ff0660533890553b31b1958801bf4babd59bf93f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-kue89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c266509e79b843cd9717b80f0eacecaa20ee3bbdd3774e33901f461dfaabe21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-mendoan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d701c0358461c315efa5b276a148f7955c0aadc34240bceb019c22b49f5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...