MAL-2025-69681 Malicious code in obnoxious-yellow-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32481e795ca7662abb02637902614c312a81e53c38ca282b9df1f8284234c3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce8b55f5fedffa444a7bc63ac7eb81db4c2edd08cc80ac9d04120c1051e7a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66702 Malicious code in aggressive-coral-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31e197dd17d33d6d7382d8683229cdb0ce761afa105baf2ccbf16e3fcd8b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60962 Malicious code in ok_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7055efdb76a943956305ab3bbd090d41e80b398e5259d1f1409bf617e6fac92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58209 Malicious code in putra-klanting71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1631fcc41f9e8d289d959cf157db86bdf80e3b64cef8f4ea6079bdf369f71f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59892 Malicious code in zul-tempe89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab584c554ab71caed15ea566d3729fd8c1f59d3441a1090ba61e2f691383c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56705 Malicious code in hard_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60334a359cf56072729cd107973c1b40d70476e443b5cba07f1b8871ca8d396e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56139 Malicious code in erwin-rendang19-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d79eec617c2594f693141735bc49424f00099877f75cbe0525b4b752fdee15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue77-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afc4f6a3e90eda88ab1cb4e201f31378ba5975c5667c7033bc48764740abe82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-bika8-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44624d947a8b39017825cb4c7cae2ededaadcacc84ffa4e5237c293baa00f7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52849 Malicious code in hadianto-rangi36-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4fa3192720c6e4e92b57a013f402d8e39ecd0886b98c39389dcbe22fb94c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lapis96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf7500836887b45a8480d4332b2f65b1a557bd16c5192427875f1d850a5bce0 The package cici-lapis96-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...