MAL-2025-71345 Malicious code in unwilling-cyan-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb42d2e7220cc981d0f109a2f3ca8601bec27b23fc3126c9f0f2c46755426392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69609 Malicious code in neutral-olive-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea501c769ba693b95ea99f724982890bc19e4be82874d45623b21cbb7193b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-harlequin-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24349d41d27a776658a4f944d04d06527656810cf583c0c02cd6fb21f3692bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed-magenta-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41053f427425ece88e955959a3a95250fb95093665d8c23b6b9db82776319c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67535 Malicious code in creepy-plum-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8baa38f4a48ec820ae22ecaa8b008d55080de34e0981a0ad78fc09d5e322a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67810 Malicious code in disturbed-red-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511676de670af02e6d0cb2f467ff620ed019c9bf4023defc8a727341958c6fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66669 Malicious code in advanced-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5e8773e8927cb2122f5b17a00d0547c6f0a2ef882b0349e46f85fc89c18f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68878 Malicious code in inevitable-pink-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f58c93377971fa4683dd331cb9347a0c88b3fa41c691b0a5babe6c9bae64ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67430 Malicious code in consistent-apricot-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd5d006e96e1c85df967c4ae01a143ace24ebdc4e728d134eb74a77c63836cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71061 Malicious code in technological-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487d318366649ed76d5cc8596e8e1f55134125b6b58c116e0ea6979c04b3d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-silver-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e29c7258bb50a74f427771674ccaab7cf9274ba3b186042f543791df74ceffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9069b2112afe02d0668abfcbeb067532c74c19d43f71efe6a4e3fb9f7ca94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep-cyan-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8649c4869e067f65e35d102bfaec24ac0b85293aa432f1c5d7b4c477294b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-enting22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f1d4bbc160ec0bb872a8e82e283e32b093dc0c20b31e9a43129195404f3855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lapis2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d2f464d8b7464fa4ba740bf5d5866078b5e0e9603f327b720b819303cdb504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-mendut17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b286ffdcd9891d39e7aef644d62a0ab632035ff2275ba502950e22cf1d663979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lepet52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74eacbfad49a13caf4d432fc727968e33de78eeb2f057b1285c178f0c0612fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gulai56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ab725c705e20c2863abf5ae7671fa1c9d55800bf3fd0b4e19fbe67cdeeb829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81489581a0bdb06ec72cd3e6013581fe2e870ed132930db2fe21fd37d90916a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kentang32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 630a46b2714a134b4736bdfa928e8e804cb85735ed5d322931fc5ddf1ac6b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...