MAL-2025-71394 Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67725 Malicious code in depressed-lavender-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd69e490ab0caba8638f725426efdf3a6177a6ea9fbf8bb920e73da61aaeca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67749 Malicious code in devoted-peach-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188dc51ab6e738d750a8c1eff7b6b82b1f7c09884980bfb9590d97331e067637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71674 Malicious code in xenial-magenta-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bbcf1f7d2a2d97796895bfb1191d34cea382c199051a16d624f0b92aff9f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71499 Malicious code in voiceless-harlequin-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fed1aedb40ea089798914f35797e6e1eacf3b75354b85415c70f2deeb7e5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69805 Malicious code in painful-plum-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gado-gado62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90642f75cd1f8395af4803fafe12eea2b21c25039f56fbeabb0407e78ab3a0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kepok69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1822d4bf5d2b2b3e91179fd36898209ad78efea85cec72bdb3e8a0013f32ef61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6239fa34a7a278719723908ae306392a8c5e7eaf93ddc1f14fb3dd1fbef75d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64006 Malicious code in lina-esdoger72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e438db75dfddeb8b79b67355ac9a68fc5d78242c14a6c62a740899868e3914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6785d9a4b81cfc3363604f87f983805a1cadee6a69f8a0f53a1ac97aa2dbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63141 Malicious code in gita-brengkes67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4749ab399422615ac7fbae5ec371f43c8d7ab275bb078ed60d02102aa59a5590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-oblok47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5f1975235b05640523b90ad2bb71a0baf2a2d43e2ad3818a92e809c33d32cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mendoan83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27afdca92f753ae7eaf0fa6fef70e96cd4392e9137968e0863d177468d0a748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-brongkos12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8a76939555467adea67679f19e67db85e2c367d9c3c214a3976da1a3655b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-lengko59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1463e2637d8d30344ad45907814cc43885b16a5eecc261281671cf9f4a2cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-nasipecel83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372891482a91e3da57d6aee400241976f66d14699ebae342e438e64d6b15fd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-mendut21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3049168577d5b49b1f7d3d0d9aad0153d71e6f06da7ba4cf0633a981f25b7df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4cc7cd67cbfb24ab45ecedf6f7f44278d7f77a6134a2635d0108f6ba3f72f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...