MAL-2025-70827 Malicious code in static-scarlet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab08208f1907de867a4918ca21dc4ece89c3d7620a0d767833dce303e8b590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71061 Malicious code in technological-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487d318366649ed76d5cc8596e8e1f55134125b6b58c116e0ea6979c04b3d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep-cyan-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8649c4869e067f65e35d102bfaec24ac0b85293aa432f1c5d7b4c477294b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-silver-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e29c7258bb50a74f427771674ccaab7cf9274ba3b186042f543791df74ceffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9069b2112afe02d0668abfcbeb067532c74c19d43f71efe6a4e3fb9f7ca94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67535 Malicious code in creepy-plum-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8baa38f4a48ec820ae22ecaa8b008d55080de34e0981a0ad78fc09d5e322a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69609 Malicious code in neutral-olive-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea501c769ba693b95ea99f724982890bc19e4be82874d45623b21cbb7193b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66669 Malicious code in advanced-crimson-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5e8773e8927cb2122f5b17a00d0547c6f0a2ef882b0349e46f85fc89c18f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71345 Malicious code in unwilling-cyan-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb42d2e7220cc981d0f109a2f3ca8601bec27b23fc3126c9f0f2c46755426392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67810 Malicious code in disturbed-red-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511676de670af02e6d0cb2f467ff620ed019c9bf4023defc8a727341958c6fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-harlequin-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24349d41d27a776658a4f944d04d06527656810cf583c0c02cd6fb21f3692bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lepet52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74eacbfad49a13caf4d432fc727968e33de78eeb2f057b1285c178f0c0612fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-buburayam52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa999e91acac1142d8d515b7f170359344193be214ad2c73368a762be0d38832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-tongseng95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791f71e4f56c9974a97adcdceb5ea3ea5ce3f2b31094ae8546c5d72e9b6465d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-serabi75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd10c57899fd06c4ed0e86d749fa2763afebb533f42417f7146c9c6b024063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-gudeg64-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee30aee1802c540776f09cf8641fc9ece6b8c7128315ed152f0787949c68dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tempe64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09e72c1599c2c181e8de6e8dba78c257e067f06f1a2db2f4b5699f89e61c524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-gulai56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ab725c705e20c2863abf5ae7671fa1c9d55800bf3fd0b4e19fbe67cdeeb829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...