MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-white-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acbc3560c7b1dd66954ed8f3f4fab458e81cbae2353a681f414a2900ffdbd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69658 Malicious code in nursing-azure-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1249bcb713d69512c7709732a469750bdb860ca642a63e72064aa6dd909e467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67258 Malicious code in coherent-chocolate-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8252d5d1c8d869354d4c2f759483dfe611a63eca1ce6ac61a84f919273768f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67841 Malicious code in dominant-rose-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0856d464e7e6dc5f351612eea466e6dd6a0a33014a05b895b94b5f5c54bbcafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67592 Malicious code in current-plum-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7585d8b0f8c1752b908e53d79538148847fbdd369fc4ea219889d131ac4279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b294be845ddc7b5b09f3c360a72a51276be6ba60e8fc84f0bee5af409dec2619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic-purple-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa6b056f5a54de4d7c0b0f54d57abafbdd115cac55c46d67b4a595ef26872e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68895 Malicious code in initial-purple-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b9d9f5f99e721c6dd6a4832f73f6d6d4a0d8231fbd1dc72f2028d48112ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c931b547772b2fafbadd2fd02b2fb13ed9ce1c99e47d3ecefdfffe01560f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-peyek45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb89209737db4856929b59b5b01522112322fa3c408b4549a2b542e156a0cb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7d24df38a043d8e9094c2f13b6a9b6e5350ae8152a1d8f18f15c82b2cfdda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kolak72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdbc3234180ce1393088a2afd399c3adfb7d5aa033d4ec6eac89c4130197eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fc4b13dd6b2b59d0f7f6210d249cc3db753129912b21c8c52521965a258119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40e021b4792e1d5e7cfd662911c0f470c4362c1102af219a7e14395cf0ebdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-lengko98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a861eb35ae0101099b0c0de429b10f80587ccb40dfe59f532b3308f6c303a786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-gandul35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9d064bff963892b1b5a471497da078fa7fcd7e01a8fbed9580b8da3025af6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d40ed548d41b1ac47ba7c4cff8b73c7ac90fa09c77e8fb2cf1a7e5e108e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-gado-gado76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beaba7f0b4309e80e83477b8fab974d0c3b2b0be1ff02e0442faf13f473d08b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9dd3c0c9ba8a0567897f65131a736ea61c6d9156c620ada5ed65ba3a2343d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...