MAL-2025-69064 Malicious code in large-scarlet-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6017ce7df242d231195866da3cab9491d600b67255f34d9f1bf361b3445b8245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71277 Malicious code in unfair-purple-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1378640b3c692592596551faec9e702160b564196bfbda86ead17c22e099cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68086 Malicious code in estimated-copper-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e090fced1bc3b2148f98e8582bae050046128dd03886782a78e9bc7c74ecaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70097 Malicious code in psychological-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b28bff64f07533a7fde60a1abb6e0ad7af52d0d87c21db63daba06ebabfbf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69643 Malicious code in notable-yellow-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9baf9abaf76efb60a172f501918a23d6a7648f648a1d24c7e2fbc79109da62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70037 Malicious code in profitable-beige-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98180acef905ba63a8f11b26d933557c47e1099bb9f328c4ffd3663cedbd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67148 Malicious code in characteristic-yellow-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eae3bb6c330c442f66a1a4d3e1fa3bf2913828392c4f3d4cb272176cc5f550d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66653 Malicious code in adjacent-magenta-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359afc346aae1c37cbbb589d084f5919491ad657babbff3571d6c8315eb83b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70006 Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d716066ca122358390cb5939bbfa631e309318fbf9c9a5e80177a5c46a6cb7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lupis16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36998fcca6b923a9b54fec6c766654e15177f15a33b7fd430e408ae25276408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rangginang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b8b9b651239733b1fe1ddc9aaa34ad70fb9fc27d498a62367776dd13d67c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-toge23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a91954c382300a26355ac78cab54635106fc3455395b931393dc4b799c4320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tahu18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52910b8611f1b79ff72b54d3cb7146a6587d5c3d04de2857e182e233d276f54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-sate14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1251855ed687f8490ad295d4ecd7f466d7a1ffbb899001dafa99e43aaeac10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-tempe41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef0fd8d503c8f4e98e3578cea84c5cdea2ea26a6b368b0c6867c0839b201dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-lontong31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bc645c08c669ef07b870cca5e624c19f59f387490b4625e8fa16040050c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...