MAL-2025-68366 Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69938 Malicious code in positive-scarlet-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d93c4763da42aa36d7ab737d5d0ca6e03d72fedf3b37c7db01b2b4cb6918e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68913 Malicious code in inquisitive-red-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600e16d8fbd1a9e51d445bbc9310b77616af11f1aacef821543ea418cf52f782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desirable-gold-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a646dcf63180396471742fedbe5d501db92258a3668a04d36f2c58cdac3667a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-cyan-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ffbda65075b94448c200e0f2005d0490d765513593d20b41d3e54319783fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-maroon-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d83643c70c2b19f86630b0db68da5a2e18acffad54594b2feb58a696a5f866f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71605 Malicious code in wispy-gold-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a112a47cba6af55d4b274bb00c962f12bbe839aea5271a12a0ba0af61ffb31af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67884 Malicious code in dry-rose-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a486998b80948e010817fdc7e3c5ad31fb7acfe6695ec6ed3eb6a13b896d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70524 Malicious code in selfish-sapphire-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a2e6d69cfaef6a5e282405835598868de3351d3c81df90760eb667ce9999aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7dafcee432b443256c641141c827c4d7e4e5ec1b4656250ffd43379e8a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-tomat34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd7ab5b2a11838f2d062e575ae2328f33ed77c12d032eaacb1bb31e730979eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-brongkos54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc64638c68826209413ab3e2adc22034ebfa99301d9162cddc0300d0877c641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30197b18b3790645b069f217ada31f5acb9e0b1f882b73a693463061a5a3db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65066 Malicious code in riana-semur56-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6d8244632d6eceaad6c7cc219da9bde7c81205458893bb8f89df33daa80a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62750 Malicious code in equivalent_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1682db80d07a8f8d7cceb87bbf987a53dc3c3d493a9f01d25e9ad4b3880dec4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66506 Malicious code in zul-gado-gado86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d77e16f20c0b97378a5457fbc735208f8c531b853cb874781c646d9176ec66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64816 Malicious code in previous_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f9560a8ebe948440a1941ec8099adfc4391ced4dc2789701eb568c8d7b4a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...