MAL-2025-68040 Malicious code in energetic-beige-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31927015f010eacac0dd53063ba10ac2f00ebb612de3b9d5d9d766719db37bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69138 Malicious code in liberal-apricot-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddba2e27f104eeee2d621a20247beddf762809fda8d247e37a45d8a7a77debf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67837 Malicious code in domestic-orange-capybara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26f0ca5f657b80fc9036dbfe2f6e4a804d35ce7b64dadd48c7973822c04a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-chocolate-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b751d6c3a3073fc4e95adca241c437e24f7031c4e652f1f1de8a4f8283c10f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden-magenta-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e962008a3d6c2164f18c59e02c1e3099116a04eed88c463afb6a4a14b98e4c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-orange-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ff5ea694aa2e70a4b7b2e7e2a79bd83073403bbeebb4089c31f77b8858b13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-tomato-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a2a5e2b466e43b405a2383f54273d2571d6b2ee7e6881aa5b83558afab0fd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-lavender-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c6ed012164c4bc33ba30d02ff0f86c655792b20b1fa0d74ac10d9986cd32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68837 Malicious code in inc-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb835a4cdb793602bffc3af2a71d8f6b49043da39d129943486908c4ecf57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67076 Malicious code in broad-amethyst-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e263cdb263adfee24f06fe9872ea96c8179d80f1a28b8626d73a5d2d878f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70633 Malicious code in simple-fuchsia-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4072001002a3c9abc80cae406779c20a6c06ef6b7cf15848bfe90de5743896c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69226 Malicious code in low-emerald-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd465894607f8f64822601c6fef7eaaf49c5c9c639034ac477092e73523d837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-keraktelor48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b8399aad6540929242dc8763151677d8003a244287f527ef415991979302e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tongseng15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e036c0e7acdfa8ab26c12b4963be9386c1f04e8c9a2d2fca9d6e552850752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-semur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf6c57a8cfb0777bbb7c569a67037c3ea17362571481fd8f9fb5ae46953e82d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e420df5d3c4da4af916b6878dd716fc226607df0f58472ab53abce6bf92fdf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4939ae41bfb5fa13b55e67ecdd3c838c21270cec9be3c6da10ee4ac0fe852640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-rawon87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382564c14607a7358ce421eeccf5de574c901fede112d0db71233450eb7247db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7164ec6d869966f26a0412f333b5ef3a51c2c20e823494e425595a894751cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tahutek9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccbf5906c38e6a4ad355390a4b8067238e52ff9024be66b685674d6d49f63ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...