MAL-2025-67858 Malicious code in drab-plum-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910464ea5be1cc6fab5885f48dfcf14c48c763d2728798b807ff2c3e2d9b6180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68291 Malicious code in federal-emerald-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989c426157388d414bcb8531979c6f2189a027119c6c3179c58e297c1cdc2168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70050 Malicious code in progressive-emerald-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb88ae567f1f5b1d4d743205b503cff50b329402341a61b62c76ede00b85d370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784ef5ee313871a3b230c244d478ad0bb7c9b11bfdcb979c0dbe3b7736da2eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-rangi28-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b292f24dd2223682b1d750d86bc2d8e39c311d55732f3cd16cf2ac75d07531db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-serabi41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2462c3e150c465aa41f54e87e99d92664c645eb9186ef7accaf3c025cae5ae94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d4418710a0ef9cff53bcc1077556ca0ed24e605337ea736c56812d5339d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1828f33e2b4e3a856f682e1ffad2470714e9ed1f8116412f7b4daaf7d3da25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-jamblang24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd37dddfc408abc33064266437b87c302e021c7169fe0aa51f4a6980d90d8c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-mieayam1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a20915136dfe3815ebfd3ec568596f5d79c93c9825f3364a2bcb2a93794eec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-keraktelor19-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3b75467769e427c75bd9b0ede1ba9f4897f7ce56f4982e9a369dc8231610bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sroto12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d7e624a342e0a75ba1e23ca3ff5dfa3f539b9c124ffdf4b281aaa5f2058373d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-nasipecel70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3605bd2050fa685919d7b0b61385ac2e1541de885e932dd061f628b715e8d4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-soto19-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdda5ea2bb21197199d60179cc6e6a7d6a96fe4a7c9396bfb1f3da881f4101f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-liwet42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916abe469d6a3806a10d1c7734ef5eacf9e12ffb335ee932903833e54b0a4d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-telur17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b06da0e29dd696c601cd5a9a8f7c52a9af9bda85eb2c9edac6b6ccd1fb0ec27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-otak-otak49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b4a7122da16f6638c0d849cb22b47fa796df32e3e099190cc0966c616ecda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lodeh65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f77ca59fdf132fb802fb96ff2b3c3e2de6d5996d0ab0237e5e1926817b025f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bakwan11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f5a9c1c35209d2711916df6c4e2e01d5a8596b3c634717e4c6b4ab88cfaf45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec15715560b885bf354a8d33f19b4fbfc0e8ec3c233eef6eda690a6e5174725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...