MAL-2025-66660 Malicious code in administrative-coral-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b263a9b4ed0aea9432186687952c453f86cf5c615bb120a6eebaeead0232ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71397 Malicious code in valuable-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff4051fdf3eea130cf94298a478f92539e77f9aa6b9c09f85b8b1e00f95f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71550 Malicious code in western-azure-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c566e7c2fc66013bef54176f1fca933930917c7d211b0199d53b586d18a03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68926 Malicious code in integral-crimson-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8781c1453c4b5ba6cc337af27e030efc0df4edaac77cabf347126d79938f8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68903 Malicious code in inner-lime-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454aa14f23bd357be395ef7e69224bf201391ef4851313900a240ed60b7965db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66812 Malicious code in apparent-salmon-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c208690ce22f7cf92267112eee5bf1b40d0bb0c5617939a887aa078091a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67904 Malicious code in dutch-aqua-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4332c39d396c4c83fdcad3e912bb7eef53582c4475ff775b2adea5faad2e6b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68195 Malicious code in extra-magenta-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe99f06ff550f1b75c5a4b18a141cb83ddc971da3ac227a9f2b3a2053600d71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67847 Malicious code in double-crimson-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b97c01e71a19d334f0e8889475e0aea8045a68d99716e3c930e2e28acb0bd2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-saguer85-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75363d3f77a4cfe4293ef018cca7c3fdb77ce0e0e21be2cfe7ae57d062cdd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nosy_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb1760425e85c8c32c0f62742df56846c1d0c4881c66a27dfcedde7383f589d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kepok81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57147cd8359118e34a253c148787303c52faa31e68c42a96696b56932c6f858f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rendang28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744461f4f75a2f97e0b004c733b67c3b815c74505d317a3551b7eab4eb6f022d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-liwet78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad3e4c645ba58b4dedffaff1ec0a214b41ccc9a24dd31bc853986af672db54d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-enting22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f1d4bbc160ec0bb872a8e82e283e32b093dc0c20b31e9a43129195404f3855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-klanting15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2554a73496da9ef2d7c373c59c8171eeafb47b8079c2aec92ef49299fb15986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-otak-otak87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fea631490e8c37b86db19f19da5542842622546feb3bd8d98a9fca9a225c274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-lupis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a82126e6dac20a700c0d6e5e9959d592861037d50b85c0927cf03e63672e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mangut26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba3c3abfc65c5b779ae744d29eb859ca00735f6a7044d916fa09eb2dc1626df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-nasiuduk76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2e11b22caf60e861be17489cb02ec9972e511dfc4e5132621b7bd173fc02a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...