MAL-2025-67008 Malicious code in blusace (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed7cce2a7af438e4dc1270f790f4adaa7d78d478c23a4134925aa4ca1a31c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70713 Malicious code in sole-rose-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cff6b9b9d5d9dd46811969f837b1f6a70b6edaf991c38da5439ffb4e2700f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66895 Malicious code in awake-moccasin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73da3a70a32b207227254b2689fb531bbb8ecb0df8b07400310519597b0224b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70512 Malicious code in selected-harlequin-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ef8650b1d9a67bbbf0c528f647bcc2450f95ea776b677aa1d6d9bb032a000c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68314 Malicious code in fierce-gray-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d38a5c347ee8ad1eec27f8fd38b04da804835f08ca1045d0eb138a247af6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-kolak54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5388b454e943d6f3f443db09c80f3edc51947baedbbe4489dfec46832ccc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rendang92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b15c3af9bec89d9bd03e01073f3f883f842d007d5e8543724e28fefe9d81e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ongol-ongol18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480458bcfba7aaf6d8c17960d26e0fd6cd29eb8ae246218fe28487dff2494514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-martabak33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46871b4f9c813b598d0ae8dbff912877fe79ef51cdbf6563b1492e9b3a8c6594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-jus9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de587bf7095793a7f3c0ec08949d09a02682c4a2328c18b13b1524e07d5885b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tomat38-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1cb33fd0f0fc2fe359d3da22dba0bad68e4f5e609d1c71c0e2e6b3bf970b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-tek14-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d04c99b2771654317b5efbf4db1697f336b6bbfeacf0bccba47528166f69aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-martabak46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf164c908951233973f07aef2b49f3fa3bc61f274c46ff23f37b7bd582304eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-esdoger91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28dad92a4732b126c9f1b166482c1afd5ac9e4994567a7984a79bf86f68a111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ketan25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb7c055bbd64e87e0b6fc023051da4c920143a670b405043d1672aefe0e66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tek58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea222ef62863277ad1c3eaf8366a0ee7ef631179fa7af5c7937ede16a4698cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913e2c1af51b1512eecfada8579cc4081ef679285c4b3ccaa8e05b32d9348892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71989b3856c9a24b6d6aa4907af597923b97c143f3cfc2bd3332551e6395e8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62648 Malicious code in eka-empal30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a06b9f0c19ea9e245e60ef43b3e8d0387a9540c8e2ebcadc43888863d9179b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65601 Malicious code in tiara-sasag89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa84574a4d99e47d0e13edf69bdf66a671ad2bcab4ec64142f8ce2376d595657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...