MAL-2025-71755 Malicious code in yummy-plum-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e73aa7a4244483f3e5ac1ee04dc75283883ed1934bae763ee7a7aa64b6afed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70094 Malicious code in psychological-copper-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d12414add444730a4cc30a6fa36093afa8df0ff4b9a1933053edce4c8f02639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67904 Malicious code in dutch-aqua-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4332c39d396c4c83fdcad3e912bb7eef53582c4475ff775b2adea5faad2e6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68524 Malicious code in gigantic-red-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d381bbd79eb2d5770db9cd505541bc0138298e33715fc7aa03c01faa4dc41a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71409 Malicious code in various-cyan-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87514691c78c07a3a07fc5b5e8ca405fdc0f4eabbf360c7b507ac8083342b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69155 Malicious code in likely-purple-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43808c5e7840afc4eb83d4a1c7c54d4a9db9df5ad270d269f90151caec210a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71452 Malicious code in victorious-turquoise-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe9a2aee7f0c1bdaa9b4489ba5e85b487766abd34432328b7062582f15da173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68195 Malicious code in extra-magenta-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe99f06ff550f1b75c5a4b18a141cb83ddc971da3ac227a9f2b3a2053600d71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71397 Malicious code in valuable-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff4051fdf3eea130cf94298a478f92539e77f9aa6b9c09f85b8b1e00f95f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-getuk76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00921b884201253abf1ca178a90c230a84abd8fb18f7a190f59a8adeab32bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba3c3abfc65c5b779ae744d29eb859ca00735f6a7044d916fa09eb2dc1626df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-tempe100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318be102504b6ae5b662d5e04791eb02a83199b5c756da8392efff70977783f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-klanting91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540663dcbdcd67f948296f9dc1d30464e6afc976b77116d81d81d459823d4463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-saguer85-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75363d3f77a4cfe4293ef018cca7c3fdb77ce0e0e21be2cfe7ae57d062cdd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-mieaceh73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fac2b14b494b08750973ae1ba723a805e04921236618fef8d9a956bef923039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-rawon21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663c1e528194776a0d01052176d7f29e97266f78eab6b1153423c6f27ec757b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lupis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a82126e6dac20a700c0d6e5e9959d592861037d50b85c0927cf03e63672e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-jus25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596b21a18f5a1e013a2b0382bfc5c4a97502e22b8e1d265d1430789ae906090b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lontong50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424607e9e326fc253c5dee44efe1ba835fb82a0ed30492a2fb6134437c227fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...