MAL-2025-66608 Malicious code in accepted-coffee-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d289f6895365a6d9a104a489a2403a9e4c7be47c01ab1f70e2fa3deffea1d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68618 Malicious code in grumpy-olive-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7213941363a3d5e37fd31b13d29ce95d3d007899cbdd1802d0490c3f97e2767 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling-indigo-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd7920d5200b98c612dac692c4eb88d519884bc64fb436366fa029af0e34be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved-gold-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0742a8f185a4330dcb6d2d0bfbf64c62406361e3fda9cb62ffda2f6ede89a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69681 Malicious code in obnoxious-yellow-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32481e795ca7662abb02637902614c312a81e53c38ca282b9df1f8284234c3c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66928 Malicious code in bare-apricot-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44eb0bf1a623980e84f3896c7f7e1152b37e7d948facf733ccff89bce161123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71152 Malicious code in toranak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a9005a5e982f33f0d804f1c0567cb260df639edc0f531633f410211e8f9f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-serimuka10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20901cb91841c881f0059c923c1edcd93c883f76f08e0810a5c2f3745c7a128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c205653b055b2fc8d0b5a090de5e109fe110f224dbddd5e33238469db6cba4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63690 Malicious code in joko-lapis48-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8246623414fd474b1b40a2a291de1230bb6d67bb889bf2efe8dbefe76c444b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62038 Malicious code in bayu-mangga45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d81d580460d7e51800cee60e3b7c1c578049a457c634b474fdb86c5b6b61d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-nasi11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51366764c163dbbeffa17404f482890900a49cb4af90147e2dde12da36e89bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-brengkes51-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49918515a10f34ceb1ed3595f21d4313328c1ca213333ff1c6e10f7dd3534645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64180 Malicious code in mahesa-kue100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3c72bf03a4a59263f38f1534751cdc6df9068d71db00c84c218a7589d619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8c028232665a1c83bc856120b99f90a317368db48d5296c9afe1e02c7547e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d0d36cccc9932a0a60d10a0ea1703f7548d54d38c60d5e85acb4f4daa13827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60046 Malicious code in brainy_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2df5428be1b189bff3d2f95e922ff614bb9247c092cbcdec3d0e94d95f33ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61401 Malicious code in substantial_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295fddf05f59aac4501b08b655e2810975e4d7eb56be6c03bdf64363b8ecf4cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cfa8ed1a10c88fd10180f283b0d88ed2701bde07225af4189c41a1be9d401f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grieving_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e6e98446aef081f76de0827472b8fd9ea1d1c6bfea45a1554370974d6e251c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...