MAL-2025-66694 Malicious code in afraid-emerald-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2342adc95404f1fdd5607c8ef5e9e7c10fe7f2b5b1521f75bc3054fa9af5bfb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68830 Malicious code in inappropriate-indigo-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cee0ce184009a61a7a1b5a401a3238d0527b7855b66865a92e88a0e3aa84ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66818 Malicious code in appropriate-amaranth-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7029ab1e9a8977c5c3ba17f0d4039f3dfe179686d9c423acb2cca25ec9b8766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit-chocolate-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ce71a3e2d18f0e12ca86af43879f3fde6721fed61c3aede0ecd42778ed7ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-beige-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bcccbb54062b8170bb271bd84d90f9ae4e16278a85f581571ace05ffda4ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-olive-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70388f6ed943188b3832e88ade099cb231ed66ff2852991b0d821f0a78e0d2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d0a67f7b15f1064e5c279642cc60c40664831ea46b8402babbee020bf09654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist-green-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc7e04a1d8c102740aa9a5a2ca5677bb71f662c0da3def1fec5716d1f0c0a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd88c111ff51f4bf59820e4865bdb62a498a7275268bfd59baf4c95490c8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71611 Malicious code in witty-purple-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2e3637bd6a8989a2c15031d5e7ea6e5d74ebd45d8e1b5bd430ac48c2d1e259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-violet-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb0e5abc812d4e5187c82df20ca1e751f2b9d5ed63857a757051bccd157e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-rose-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2ea3d085281f31ecf0833638695e3eadbcc6451be3c0b94266db2d218b4df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68167 Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68189 Malicious code in extended-red-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867e220d17e9c853b5e08a06944e3f06f708834f9575504ff0ab3cb12b1b15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f326d042c03ed3bfaa75f25d99884e5e5b8918ae415448f6e038dc399511406b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-semur34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0d1e9c46e8e58bed49f926435aa527ce60d9e6f8612dcf867c7c7f9db36ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-liwet2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc7145acd7768e2d6c3156158411a9ef57a530b9fcf81aa669ff952a5d32c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f2858f05f5b93fd3cc38b8e9ebd800a211ea7c7cdcaf970f696ba996e2324d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kue16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01033c6a45251fa8190333d72fa2217b2c2aa1f79863eb02e66ff2ca944def53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jus14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff57b5903e760bf5e753ccee958a7c1f1aa3f4a5efaea71b42e0ca6fda97640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...