MAL-2025-71616 Malicious code in wonderful-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78515120ef92d62fc21017834d629a81d509c4b67a4d00ef50c4a96991e2f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable-tomato-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c865667f7aa79c8c5377d38db9281943b1e983daf9e4926ad3d6ce2f9495de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-coral-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting-sapphire-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c545ba8efa110c9e44276a6563868bf85830f4e4eeabf044b2829d6423149d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit-blue-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892323eebce3f6875acbc6c803a1b0db1f06ea05e91fd1822687c6075bdd45e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-fuchsia-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b523b11ef7c4e06847961e09f52301c51425feb96dbb9ae49e3ea48e6126d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparative-moccasin-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb48d9357cd3b173e26110bc01335c184b691aab1cf4b2aa28c4eeb7b8c381c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67569 Malicious code in crude-olive-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82650962279757424e75119d3d4d14a2a6eeb507110d5b8156454af8e65cfbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67381 Malicious code in compulsory-maroon-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9a4a81303341217ccbcc2e6ae38058136d17c206f0af4539cd32c6a42211b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71627 Malicious code in working-salmon-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b84454e10ffdc3062031556494bbc4d4a183cb35f58f19bc1f7cf076b8a438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70883 Malicious code in striking-blush-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82967994aa1f8eb88ef89ad632693f33aad080c8f57ad34d7caef522866db24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68658 Malicious code in helpful-plum-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a91e6902b33428b341ba356a20727318d620af836d14e4579138921d12e108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unconscious_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801478fd8dd5ce7083e8e7e2f6fb5f113081f492db943b1adf5b49c431569af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63219 Malicious code in hadi-empal65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41edcec99b9d20d49e89c0c5c333e87b0a0b239e8554390079b73bcb62627285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62762 Malicious code in erick-jus57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7e0597950f5293556de61144f9580fc31d5b791f0fc536da04616642d064dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62278 Malicious code in cindy-gembus73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794757d949159076d68b6ff6157a214b163f439b65a1d47f7c56fe2702e7d76e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mangut67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871dcdfed000f571b3fdb067860c94c0d9ce0321150df730fd2ddee9b2335a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-lutis91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2e8855d93752612d05b4046c06b30cf414fa52e306315e12092ff5da6cf78e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...