MAL-2025-70414 Malicious code in romantic-emerald-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e486cca7927a40d92f742d71581d78820c2974078854bb93faf6cb5229248295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68029 Malicious code in encouraging-copper-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd999da2da312bdcae5a101d0fa8e9e722b079b091067e38946113ef48f731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70419 Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68921 Malicious code in insufficient-red-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400970f0d41bb2e3753a74d093bda93ca752c71cca0d2ec7dd565cfd97c9ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66624 Malicious code in actual-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a4d1c80c457c80cc4b8fe370e4738d4360e7a76cb4a7122abc41ee43a77183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67523 Malicious code in courageous-crimson-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419b1e4473b4dd0ec98266db2e812fc976f3214bae44d1aecc92e1fa4ab8e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70877 Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71384 Malicious code in usual-bronze-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2bff99d1a585f4814712a6158a4f5c7a1b0330ac64693615a6e5ba5c81404c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70469 Malicious code in scared-cyan-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69701 Malicious code in official-green-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8bd057ebec4d6117c8acb3fa003625c4abef79d72912aa1263306073f1a27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68316 Malicious code in fierce-purple-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175e5cc50256b998c149693e2bd90761f604b6be555fe4d976e50edf52cd2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67679 Malicious code in defiant-teal-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086230f05c101e1cf641d7e46463258f97ac0f01cc44ec9c7be520cf56cd6eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67590 Malicious code in current-coral-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21642c22551faa3ab3edc8f25a15196415770d5f130ed439d876ba545b7717b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lepet60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fca1d901c416002da7758fe260fb611f97b561b0f9560fa75a0ed35f80cec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-tapai75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0235692d5ecd844daff1d7ef2872d4e1ea8f2d63f19a9ef6e6b3259c14f4a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rendang27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ef9e5cc653b2f2dfcd269996ca06677860637e7874864f722484e0b653d673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b948687f3c907ec3657229bafbc6d70c75ada5e0f21066e571edf96d0646a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-dodol48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f418d983fa266e257e6ca39b260402be8bbe40b8be9be0ae54131cea9ee7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lutis25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd97a13c1b524c85eb5b1c0b549380c677f73755c89c300916e229a751a3c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-keripik16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0303b51d7c7ada0c1b4626eb7186928317383c6b17c5d3b7155d98d867e1c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...