MAL-2025-69076 Malicious code in leading-chocolate-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d572ac374f059d6e27914bfdbee76b3982214424c0e27ac7492f241bf3cceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68005 Malicious code in embarrassed-amaranth-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060176a865bb93fd400ef52c09f68a0c90e1c96e596771fec5716228e874e5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70294 Malicious code in reliable-tan-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f564a8500cf19eb18dbeec15075ca8db697da1dcac0bdb934905befe483f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66687 Malicious code in aesthetic-lime-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595f426286d5903dae1cf95afeed3b0bfeaf59810df3db860743e54ad70509a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71088 Malicious code in testy-violet-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25d400cc642c381645aec0ffd1ef6ed3aa3c3f3b029316ebbca2c6c49290051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67337 Malicious code in compact-beige-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa24721be18045cb4cc85b77da967c9bb9dd61da50916f83bcc7610ea5a69ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69502 Malicious code in multiple-pink-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd96db17690b8d5fb17db5472dd6daba6bfa88c7eb8a6e73e84c3bbdc279f5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71584 Malicious code in wild-fuchsia-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def211c66d852174eefd2de3b24a6f80b5b721a45e9dbfc0eb0e5dd01af6c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69925 Malicious code in poor-indigo-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195250051088e480a83073204add7481d7e5043bb039e0d1b54c82cf2347b15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-copper-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d12414add444730a4cc30a6fa36093afa8df0ff4b9a1933053edce4c8f02639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient-olive-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919290a0e0535b06052bc0869a80318f991108aab4b0e0bba42941d7f008964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable-emerald-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606a27e43fe3803ba9f00a83081f994b49341b309b0b0c10b8540ebb289f89b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-black-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89cbac5e3740b4505f505d08a5009bcf63f9c55297bf328b67cddc08e03dadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lepet24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3832adde2ae6af9008be26c8bb48abc885611af15d9987dbfdccdbe23fb58fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-papeda68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4338e508980ecf60ebc6b2008b36f311d278009ba3fc48090c471e599ddcd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lontong30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0009017cf500e73d94e53c88a51b3d1434e009792a997e29b35242068e1a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kue31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f8c623795515c0f4a9a115e8cc0c9ce3d05523ee1e853cc4bb7e8409ecaaa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-klentik57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f669ad8b2e3660feefca9566d837c3a5a6e3f39656bbb68d5d77af173aeb9b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-mangut22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612012e329881b7fc72e29f181b180a592b340f1d88e5f0cc3ad1004a51c4c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801478fd8dd5ce7083e8e7e2f6fb5f113081f492db943b1adf5b49c431569af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...