MAL-2025-138703 Malicious code in existing-cyan-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1633ea59d481983ee376978a6a2a319ef27e6a0879ca09fe7a81cb5c45902ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138957 Malicious code in pyonga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89509b102cedd27f8218e09a3d8eed64cd86ca9a485d41d9c8eb426dd82e179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138708 Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138736 Malicious code in frequent-crimson-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a6facfca29c6ac2a7ed67fb8d73c51fdddc074c47b5253fe74da6a1e16fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very-bronze-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a26f5a63cdddbb9a5eb0e186b99713720a3399c3998db04cd9409bf6ea2521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-salmon-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42648f11db276a954142308546267284bec5c46fed58fc79193a30dae30dcbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139093 Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138816 Malicious code in isolated-silver-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf3579bf50d1c12a6fa36e149c314108aba643f652b64a8de0ac59cf18e589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ruwet96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5b8fbe0d04669c83134c53d938fbf618839f7fae26c352086edc2a9d8d491a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jus84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96541498e85ff688455fb2a43b5fdd622d20ad6e173b2108ce3068669dc04d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gorengan56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a7db329caa9ec2b8e7279f1850bb100570b8c3f14d77268e0f715b992faf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasisayur10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a93b745af4e13b9174c9f884361851d8802f7755734a7de821e4b6db3855dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tempe33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21f858cc3ed6e0f39a3decac1f06c035f57276b48a3803984c9024c4ad9a11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tahutek24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe301eb46bd8c987baa66c78d88a19ac7e1f7d550f7b98240f23b90568036ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greasy_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2f8365eb00dd39d9ab6229d61dd6144c47dff4d84f927ea9881a9c00d78ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a753161763e0469f5c27fd4bf7881e9b8f3c404c6289ea1069a60cd33f001df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieaceh16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae27a3ade4647a09b60cf3d79c87613c9c1789236d96fca5e922407ac26383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752977c6cce98f410a8e231345bec7eb59c9254ebcf02d1d91a174e6cb44ec94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...