MAL-2025-66663 Malicious code in administrative-yellow-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c50eb7c74565e810bc59ebe5c0552e6b6d465c32fa164ae08356f6945c6b53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude-crimson-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56a83998f73b5fbdc78bc3e0d4816516eed5a4f7a088ef1a3e368c127bf8d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous-lime-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bff2ce5f7ab0d43c9cc53b3a31d48522a37ad6ade9c9a5c41008848f62306a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69842 Malicious code in past-olive-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede04629d7df5e6f92566df4e78f2786b661bf06b897accd4826fb99383fc717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69437 Malicious code in misty-blush-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f15531f98c11a93d554e7c6ebf1e705870481548ed585c7c8464e7ac743ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68379 Malicious code in fond-black-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3592b57de1acdfb17aa00811a817e05b59af4256770802827f1cc02c6209de28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67608 Malicious code in daily-fuchsia-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753dad4eeb10a3a0482ec27daef7a55340a937460c04b679f67df0eec3548cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stellarscribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f719c5d21ba1e83d45d2ed4280c2fd109007e8bcba7caeb86d32ab57116a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful-tan-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c863f13c59d30ddac1b03cb3b006c53bb6975cf73f037a0b70b7d116eb33b765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-scarlet-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e04b4788946f2e5ac61cad89d3267c8c657952593dd8ccc3e8ae9d6ab3ee5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-salmon-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3d988aaf6fc06bcb9e178e6e282ed3a111f9ad3e31b371b330ad67ee550576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69202 Malicious code in logical-coffee-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36840e14eb06b73629df8f2da5139f5bee9627b9047a9353e14067a7e52c49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lengko55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae0d6bca8a93667bdd47b95660f310cd8e6e9d2d11d7873b2bc576048ebe2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62995 Malicious code in fitri-bakwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5952f68803d03f942125ae80bfe381ca8c214e875ae96f894d29f659400951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-rujak81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1aa0853bb50d5a0265170a249087aa4cc5724de12adee5c1b551306fb0d0e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-mangut38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300a15a1f53c545c0d71303b08d8989bb5bce0ba89158afe5cb1f5c6d1a2a5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62925 Malicious code in fajar-mieayam86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528f5575b442ca1af7f49254167a81a711ed224ce3b8a10b61964c52289c192e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63645 Malicious code in jaja-nasiuduk79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 581d18921ccb9743d86f541c273f7e9858d4285d4e401a1a4e5da97b976e0a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...