MAL-2025-71075 Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-blush-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6be8e8a611a4c10be1b762ee7b83a9b1948a4bcc3f1ead38c2a3e57a869e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-white-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764b6e412e43ab93f8173f2d4ce2680beae95dac5fa4f020ae41c4f9ed61d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70494 Malicious code in secondary-maroon-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615caedeb50ebd532e6343cce45f050d416263a5e320810577d13b0eed883427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71308 Malicious code in united-maroon-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1280642689393e13dd5981428b4c0b46f7605d9eedc9a9ef26f5847946e9507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71193 Malicious code in tropical-apricot-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887d0b8f26def487e9cf4fb4789e2e44e51a6a9cfbb37ce569776bd8d5c34971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66584 Malicious code in absolute-blush-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e77491026c76953ca119f3b7cad35f2481bf7c3a38fee9baf3632544c5da0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585f8b48197408bf726e2cb9145bf8300c5f65cfbe542ec86ecabeb5101ce997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-buburayam13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eeed22407687247e6d5ac20e212f78c1514c51afa463950557daa025a647ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-nasiuduk38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ef24b56972b7a615914f06ba130aa6080287fb0c92958a97c4fa7e76557771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64935 Malicious code in putri-rangi44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123a47a516901d5352bff42d8ad0988dc5b62f9d52baf63890b0bf0d8c532dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62256 Malicious code in cici-ragi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e8f6f075253d728e1afd6131e34d3e0c7f876d42369bfbf92cebd4524a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64120 Malicious code in lutfi-gudeg36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df99fb3b4451386330cd76f14f126b2dcc7c60085401fc65dd055da9196567d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66221 Malicious code in xaver-nasiuduk89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbe4257b29090db007660229669cf0ce08266a9e2046f54ec9b77818fe67cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kue18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731b9bf1081b1b54cf477e01f3f01ba9757c9c82e296aa3fb19245527bc52b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lapis13-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa619c89c23d78d51a01432e86e1371e9180ffaa8f4313e051fbbb1c1ced89f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63847 Malicious code in kresna-lapis68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf69066b5d40d1a585e17facf786ba2b5084ccb3bac29d72ad315679d87f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-ronde98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36849d48ccbec5224ccf92789700598d803ec905db70d5437b0b8e4cc6cd6410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...