MAL-2025-66709 Malicious code in agreeable-salmon-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4590a78f6ebeefe35f0f2628eae05a531400bd56b8711d2112287c67745ace35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71796 Malicious code in zoophagous-peach-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf463ae7b2abb09e1736b2d0c533e373406ce7e8fe3eafa5b09a7e45ed92934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70075 Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68806 Malicious code in impossible-orange-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae880034a2cb679bef3088915d85f8f10680a68c812e4b367dd6e7346fe30ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69834 Malicious code in passing-peach-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcd93132cb3f00a5f5d160890ca900f1b73283e2cb4e40f65f40049cb2be8b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69144 Malicious code in light-coffee-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66975 Malicious code in bitter-amaranth-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66669 Malicious code in advanced-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5e8773e8927cb2122f5b17a00d0547c6f0a2ef882b0349e46f85fc89c18f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70115 Malicious code in puzzled-gray-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcf01df41e17086338f54a32182be4cedf919c700c412e4c919fca660d2a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4127e82fb3b29e18129f3ff19b323fd7aafc4c0ab8f443ea8e48158c29b0ab32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d40ed548d41b1ac47ba7c4cff8b73c7ac90fa09c77e8fb2cf1a7e5e108e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-oncom7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9649ce3c954d6c3af3d4e6c53e87d497a019e6c33d785d0e8dcb379c826fbf11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-mendoan69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aa9aa5666105b4c5b29897017e8510288975dba948ae0078418e28f8e9f6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-tempe11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a9479f6d498b3d3192a84a1ad935b26ab836cd2326210416a9c19e3e7a4dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-ragi48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b300ec962d8e0ec11a2742e85d0949d31c53a5c5c45b7c0d71db50a089f3bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-rangi74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6417b776c07be611cb9f33280a44f6f00bbebf7d493ebbe9db90cd641b3c0562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33db5d60106f8afdd50bfc8d749e7040a2ff266a1725750794a5a3610ada302f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-telur68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d697d41c95c340f748a7eefafec3c74964e3767b01cb5cef65c28a518488d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-moci19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84e49fabef420baa8ae8250a36eea1b03900db32fff9549da19dd14c1520c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kolak72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdbc3234180ce1393088a2afd399c3adfb7d5aa033d4ec6eac89c4130197eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...