MAL-2025-67014 Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68746 Malicious code in hushed-yellow-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5046b6121bab1999145b9076ee17ff197855f7d1946b41356b1bb5c2e4eba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71207 Malicious code in ugliest-apricot-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c14735b07017a5cb8c9b7c19d28bbe1809b24a9dc16a0e0e5da411f1361197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67698 Malicious code in delicate-lavender-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ebd5f6b7895626148808abcd74ff4e91239dd64c538a86ed7ccfc04b1decc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68647 Malicious code in head-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-purple-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6646b22c5e66eeeb9121ff5987fffa05836d1b8784f79ea3bed543e9744ba250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67202 Malicious code in civil-copper-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c59dd53462a2382ad124ef711312f510ee99617dc31f1afac4504567fef079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67111 Malicious code in capitalist-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6d0d57300ef72003c318f75d9e83d3482318e2be9c902f77424f24b90f0263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69252 Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70617 Malicious code in silent-purple-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b48ed2a9fb10cdea6c195d89f547236e68a613b0a14d5bff04e0c6752700815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-mangut93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9483f041e2c5ec8632141c10330ec2b48f1b1c8ca2f203db14feaffc8e9bf68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lodeh35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478e9c5e89eeb84be78816f995d057a25c84aa497e93c5c8dc5f00df740dd315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mendut5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd916533008818b38520b4804cf9c72d2d5b3e0fdd50a117adb60366ed341ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64125 Malicious code in lutfi-kemplang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfdce0ac50ef1340c71bdd92f438917d1e4db5845cd8a6c097a558092ee193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62870 Malicious code in fadhil-keripik19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b58a89112f004070d007c5d2fc558bbe5ea43a505378b7b241d57cea71a06fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62966 Malicious code in fauzi-mendut46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0532b7440891b42bf855bc7e11e307592668e013f9251cad5e327f65c30dee43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62450 Malicious code in dewanto-lumpur92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4191dfea0c5db62716aa3d861007278d222b6916593b5256be29378aa53819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62324 Malicious code in citra-klanting94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261c7c89f2c16bfe2e2a764b01f7af8c82a050f4a2e18c12dbda2d45e256d310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-miemee99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29f02d5d770779e41535076f091705b047cf4805e75e06550834e8b4dbdbf5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...