MAL-2025-68011 Malicious code in embarrassed-yellow-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ff0fa496bf27bc99cfec9ea3aa1c8b49f3f56eccbdf553f56c7856ee5a7602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69804 Malicious code in painful-ivory-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6816ec14bac99c4e69dfaa028f665a59bab11c3545be6d0d45b4a11637d16b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70828 Malicious code in statistical-apricot-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5133c5bb69dc10a8aa2b7d668fcda798940998a442ee7d6d8d9748b2eef32cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69621 Malicious code in noble-cyan-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292d3238300462b88a379b868dab0dbd1faf683c5f10337baddda35726e8aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70916 Malicious code in substantial-maroon-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6a90ade9d396331ccc3727320e77cd0b9577bbd3d9296234ebad391ffd8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69756 Malicious code in original-amethyst-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39b544048410f058f36b431b65c7f09ddd1082302da253620ef8b177dfd5e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71726 Malicious code in yielding-indigo-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e2a521bb060ff9171cfad4e9d1ebf7728e8276d334b7da57ee5299b2b7a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-serimuka22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc40707c81e1f424c3c9ceb0e19930b949cb64795bc0720412f150ce0e8a4b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rawon78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9cbbd5a0e6e28b888b05a0d55caf86e075c6cc9784cc8e36117d427e802a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gepuk58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857ee97c0d577a79443e9aedb89fa0ac6031cf68e01d47fabf8a1647d2892bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-oblok92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3eb0ec9b1e1c99f4ebd0dae7c2d0c7012bf869d0bd3d68aa9ca3189b016290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lodeh2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512e0097f33e426242f215aab1d9e643db11368d4320396045a3ee97f7b7e448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gandul59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8319820f94a9f7209cca63e3589900fed97670ab36d0cadf3ecbbb44d5fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5240d551ba8da68fbb376727b02eae6c46d82d6a6e2d50fc8e2530869b61ad49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-pecel29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5c4508c0655bddc4fc29d96d43f68c8b55ae5952dbc70856e05ff866dc92ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rujak58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8600fb59c078f8f73559a480eef9c4c2456745b34061fed528a8a1e7dda63793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pecel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addf7b73c6002486e8bd016ff0660533890553b31b1958801bf4babd59bf93f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rujaksoto10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa674e320ab397131b588f5dbada6665edddd5876e8a4785d169d614e69c2657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4cb001edb129d9d5fe954ebd499a8bb7cd818fca5122ec60fdf0e091f85f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-semur8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83216a3b9c9157c594ad9b87a58f060b532c6e37805bfb3a37137de361c3339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...