MAL-2025-67727 Malicious code in depressed-magenta-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45feaee03f52f5a82e4ab899d3baa6082ec93744130c6c0cd4ad4a0f8993031e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67198 Malicious code in circular-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd48e4515f4491e495e1f80799832ef20aeb3b01c3e2bbbd614bbecf6c6e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67230 Malicious code in close-apricot-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d421b61fdfc98723e93dd39ac5fdf28fc283cd4492a447460082570174ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kembang80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c6c509a03b25c03d42f20813ef37b5f51d35e834d6f4f9e53f17179b83d82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-taiwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c49a7275f02f11b2182fca6a961f4ae9a8bcf0fbfa2aa404cc0caca8bccc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62097 Malicious code in bella-tempe53-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901b9ddc5e03757920c5803834819e5bf74a87e5a8431db17f48eb0a0e578465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62806 Malicious code in erwin-lontong16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8049ced151d5b83a724ea12ec32ac540c0f0c74b29a863fb29d33104abb4fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ad5c0e392a44174042217187b808342320694f72b1ab40618862fbaf5ba21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d05a56ceb98e1ad10f448c57d022873d1ca3eecd4a059f6843fc8fcb77229ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-miebogor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588ebfc66a3f9b02fbc2efa635a590d18aa36ac9a3c97e6628628ff8eb4f7761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kembang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dac326df5a9ae4f6d7ecc323ce53dd1f6a5a9d1b2c83a894f2a250816d98322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e08182fa7b2f024be0db1d8dd6a568f3c488c7b19a1a0d76a82bd14b9680aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60810 Malicious code in managing_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132bb945a80d66d8d5cbf78cb5570ed9a24aa171df00cf977024754c13bd5578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eb13fcb75862b1971fcec1a17f7dc64d1e9e87565844ee70b8fad9ba51da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lazy_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a92e1aebe06bbee00a6d598f92ba2dc7f6f953f9ff1a8ea4acb1ad33519bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lepet71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45f9ad7e380edc016b78b2b99b254e54e5fd368919c2984ac1c5dc94802f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57934 Malicious code in ocha-keripik72-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e1b72ee564c4d54d2b325eb0eb7b74556065e6a47d51cbff729323a3f81ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kripik58-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 948bde4228d3ca6c44103d7987d6494451a700d5027ddf6dca5fa0514f6d01a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...