MAL-2025-71409 Malicious code in various-cyan-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87514691c78c07a3a07fc5b5e8ca405fdc0f4eabbf360c7b507ac8083342b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71397 Malicious code in valuable-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff4051fdf3eea130cf94298a478f92539e77f9aa6b9c09f85b8b1e00f95f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70532 Malicious code in sensible-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325d56ae75be39c05ef47f3d087a3582d4a13aa3374373b6c06d044ed48a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68010 Malicious code in embarrassed-scarlet-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a606a6fb02abe788e76490871ad66c6291b14b64a8bac28190b546725fa9f4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67524 Malicious code in courageous-peach-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b82c310b25a4f536745c8e6396513f220f2c3582b3324c0d47b16f7ac4004e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66791 Malicious code in annual-aqua-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b85c9d497b8d6ccea223bccd2a402de540a6cc8c9ed3784b0293b5d817aaeb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-copper-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc90295e15c2e4d3f98a61b9dc653e69144ac40161a050c9774e990a2edf18d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-brengkes98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc51ddb2baa0dd98b03f646e5b4091a507ce47db85ac640d70f594049c1d432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sambalado6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbe6504ecab00a8a09a874e33ace5e15b7f4f1b1f52585d2499dcbb306d32cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lengko65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb2f1b0f7bd07ee704d58b173bc7850ac9a93d72dad35010e7358a62dfb27a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72faed65731b633c9c1a7ca9647a37a98c6beb149e1c2eb68147bbbd6018757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a882f917748c14878f5f1d9909dfdbf3735359a61d4526f6763b41e911bd3b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-tahutek11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e698618533953157d5e2ce15440f7f3cb70a2eecdf22277f9f314582de58bacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-sego63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0325e522662c1a0f16bd6b9b6ad1ab9c9a0c019ed7f443e0c20989a0bd8bfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-getuk76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00921b884201253abf1ca178a90c230a84abd8fb18f7a190f59a8adeab32bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5f2037664c199774645ded34200f333ecab9d2a3001918169bc9a7ad467cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-rangginang95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eb9ef59f2e5a5867eb06e04ab503e626a0feb217e3df0763afe9481566ed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...