MAL-2025-69022 Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-blush-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2186240116c8ad343d24630dec3be48f8105d0f3b2890ad19ee5d55b33fefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67974 Malicious code in eldest-blue-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc6e56f206041a3f1c069ee091f812ec14369fea9fec65fceb83cebbcc662d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbd81cfa0a7be6a725480beb606ea3136d08a613dc4cfb77eb0174f26a5d479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head-sapphire-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f28d9da843f6de9514a4079f13a47d67475b5ea19e0a3a1917b092f14f9e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70178 Malicious code in rapid-green-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae324bfc8ee34237b6319750c305e0c45eda20eac31709166eb455e3fa2ef9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71420 Malicious code in vast-azure-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 008322346a37a37a986bd65a74d2fb5dda1c01e015c37188a0656000bad2784f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68136 Malicious code in excellent-rose-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2ea3d085281f31ecf0833638695e3eadbcc6451be3c0b94266db2d218b4df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-lupis32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1135d13497036331745dcece5a33bbdd86ebdc982c30f4799b0c880ef4dbc89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae89b5bd18028471c3aca7fbf58184e252047d4edc78d46b6382f5da58694c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-donat45-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58af4763f9418a79179e86b1185e844a9c087d1481d6b525d667ad6cc6c7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63498 Malicious code in indah-toge76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3413b0274522c7104c203bb34fa23fe651b78568b6d7bdaf3a40465961f4a812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63572 Malicious code in iwan-bakso95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef109ca6a259b1c1fabffac3f6b1242714c942fc1ff7af8eb77fdd53176b9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62770 Malicious code in erick-lapis43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2820055468a2c53013894223132e303d91340c0fc8e73eb44bb8072a4b3b02c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62757 Malicious code in erick-gandul1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f52189f868d72075885dfbbb9e5a8c227211bca47f053feba9c571b3387ceb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-semur24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeddb2e2ff25c1e7f49d18c0131f7e709a6a18765b8ce2b67764ad9236805d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...