MAL-2025-70409 Malicious code in robust-tomato-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5c2a0406505da20a9080fc73ba27400f717bdbe2f01d702fa768a7271f02a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71603 Malicious code in wispy-aqua-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1215dd5d338d7cf38be5404fb056535a53cf112276cb64c32d6d2eac6d8abe5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-rose-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d542c9913afabdd3067f0e700abf292bb2c8146498c6463dba237779e5fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-lavender-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298147db972eddbedb7bfa3b6f5e2ed564eec068be3597f7b2f00c5764e844c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-tan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5bdd0a53a46a559381e306d4ffed89149e0363891a18dc67f4a0de404ed36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-gray-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bb8f3e9dde279ed1814194c255e502c0c544950650136e069b73057febd217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-red-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9e2eb496327e6553f88ee61f7cee324f13e6158a08d83fc21ae663b0c17bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-indigo-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbad540e1df3506493ebd29e2d6f7a2597f5b18a703b371ab2821d0681e6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70087 Malicious code in provincial-peach-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f52f720a5e879d379a77a5e45df3236ded53d0d70d0c23b0fa1ecc3943931d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67587 Malicious code in curious-turquoise-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad31f541a015a2bcb8e47e4cb35f1cbe833caafea0c829b69f7bb510ea6c898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68413 Malicious code in frantic-amaranth-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a95f1ceea7ec31d70291dea6219e953943c47c84ef32763f2a19ad6a8e737b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70098 Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-klentik79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cb1a2cce5904779292c26346ce00e0b8f1ef622dc76dc4a904eb29d269e77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-kue60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58f8e9470474f264220c3ff31a4bfc0d3d7723a9f91fd78b3a777fc59c3dedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65680 Malicious code in tuti-lapis59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01d91a3d1765e02cbedfbc69dd6b6df64bda37a48a19cc314df07bda6554ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839ad6cc8121b6289e2a49cd80c719306a42a9b1f59ecd443de149d7e1cd61eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62628 Malicious code in doubtful_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a2af052d2ac124af91acd9aa2688babd2840f76db3a82021e1eee166a78103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63177 Malicious code in gita-papeda17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d392f31aad2efce3f5ed2d491a9288b841786dfd7bd1ce50dc1d0ed9922defc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64051 Malicious code in lina-sego30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054787cea0bd280447bc85f9e4af521606f232687c88fd723cbb1cc010f7c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...