MAL-2025-68650 Malicious code in healthy-copper-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a27bda73ac41d9a5a074a7eaecda04fa99e348444c37daf1862818d1fe4364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66629 Malicious code in acute-bronze-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e254478c454fd14b13f56821a18769184b9289364b23c5e04f12629d3e08fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66713 Malicious code in agreed-emerald-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b0baa120f81f5641fa72eae2b5cce3891e6b035a0645daa57d38736d29047d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69763 Malicious code in outdoor-amaranth-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21332f974bf820beff6edf2969d3c5fb6c5f2c87599be11692fd2093dbdc4478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71043 Malicious code in tart-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb72c3e2404104d11029fdb0d5b89fe92bf18bfbcb3eb0e175f011951616ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69740 Malicious code in oral-tan-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2463a8a0771ee5da0fd941671916cc060f9b90b653846fc0854e5404bbde4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70535 Malicious code in sensitive-white-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0319e988b13fa7e95240e108d512f3c2c4cfa1bd9ed8774ed089493466962eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sate16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37aedf45bff64891c34b28c843db9fe4a5904a4a67dc72aec72b7c9c08615d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-dradag51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e706a9a0acd7ed7989c2846b91ac74e3133651ebc357a9e41369ce549ab15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-klanting95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b646f6ae7dd7850c26f8d4951778ea148eab745f46d8742a45c7ebc39c9613f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47038b245dcb01bd52d944ca4e0a7f7d8accdb4d31478a08f5ac34efbf8eb133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-botok21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c56a8ee66d8e3acb5ca26697f6226003a75afbfa71ecb3f5e81b108e55ce7f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-peyek76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d69d56954ca6f4137f48a358ff7d1ffaeede0261efa9645edd075f3ff76114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangut51-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8500d31387a65b528cb3f3a5900089d1beef79b8084b534376e249a6fb9f1677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-semur1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e857fc014b380193ac8e4e87ca3fd138e84c771b0fe2e0d288a7eb2b47da82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tumis89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69593b1213f91db903c66a01bb3f95a9becf27b4357fb1bb5d2d07f9b1cbf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-bakso75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236d2fd5eb0f08ffdeb57026846d0c5f16e32d13600b1cd2f60180088b9ec172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-nasipecel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4db14ac910c384e75df172c53a92d5389868be1fcb395e4c4014f5cbbab58db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4a2b696fe0d22068dfb31a731e93948b49a00a06231594896acbb3286ea230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tiwul89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f01ad9f327698a113f42d0f708218ad143acdb3f951caef9b63e28a487babaa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...