MAL-2025-69190 Malicious code in lively-beige-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e4437de3d0ada2b65a84cc2cf1697663d11b7abbea510c226451dc0a93d94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71079 Malicious code in terrible-blue-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c31d2f2f455e81c08b320b16525e825151809500f538ef68befd7c01c477b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-white-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acbc3560c7b1dd66954ed8f3f4fab458e81cbae2353a681f414a2900ffdbd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69658 Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67258 Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67841 Malicious code in dominant-rose-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856d464e7e6dc5f351612eea466e6dd6a0a33014a05b895b94b5f5c54bbcafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-magenta-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a14106672af764805df4c0100e2a19dfa8b7b38b2f66cd2c9fcfca1c8350bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67592 Malicious code in current-plum-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7585d8b0f8c1752b908e53d79538148847fbdd369fc4ea219889d131ac4279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c931b547772b2fafbadd2fd02b2fb13ed9ce1c99e47d3ecefdfffe01560f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-peyek45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb89209737db4856929b59b5b01522112322fa3c408b4549a2b542e156a0cb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7d24df38a043d8e9094c2f13b6a9b6e5350ae8152a1d8f18f15c82b2cfdda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kolak72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdbc3234180ce1393088a2afd399c3adfb7d5aa033d4ec6eac89c4130197eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fc4b13dd6b2b59d0f7f6210d249cc3db753129912b21c8c52521965a258119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b884919b4abf7dc42c4400c12dbb324230d433b8beeb8a82ac7b04450dfe6fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40e021b4792e1d5e7cfd662911c0f470c4362c1102af219a7e14395cf0ebdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-menjes77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9735469ee9a7a03da4729026acd63bd9753007c4b127221ea7c41637dc672de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbf23b854ae5673eb1fbe4e129162c2dc2d803460f4a4ec35baecd7a90cc9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lengko98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a861eb35ae0101099b0c0de429b10f80587ccb40dfe59f532b3308f6c303a786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-gandul35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9d064bff963892b1b5a471497da078fa7fcd7e01a8fbed9580b8da3025af6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...