MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69478 Malicious code in monthly-moccasin-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3cf794d51bb25c9d6629c8dd65cce142b09bae0ab5c11e956859ab33f0f23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70738 Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67102 Malicious code in calm-amaranth-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd7b441388cdf2f629a286f7aaaa39e770ebc6a590370f010dde29ca9cf705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71718 Malicious code in yeasty-silver-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5939e3dc21df82474de850c73e2c9d337892d03e4f4ebee28007bf1af8c3a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68811 Malicious code in impressive-amaranth-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9293092e5301404d2f71af5e25b1ad94d9c20f605d37a63ad0070d98d0003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gudeg90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a62ee21938e2e3b1e8379ff79a39ee2e94dd447091848b50b1219cdddaf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56665

Malicious code in vida-ongol-ongol1-sluey npm...

Malicious code in adequate_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6641c3113af48a7c84bf316880d2c8300c6a11f42b0dff0a4788be2e11813f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-dodol19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c701fd5b5b33f39da8d59cc29e60b980f0e6cb84430a94f419cbb6645ec1a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0f7f65597e83d7ab6cddd9d74088eac385dc36d1b098239be1118c3ba20f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-klanting61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5f060f8d143a089cd59dad75114c8b52b2428c16379b5eace1a3763f9cb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sate43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c68f9f42e4f31668a71cbb31ea4fb8f0533b72ea0821ff11f01dc81bade6f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64312 Malicious code in meaningful_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7cfa22d8c1fcba8abaeef8635780de0a517bc428034d5d35394139ef565a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65326 Malicious code in sinta-miemee77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6b26d5d39a4029b5010c90f9f204f3a69d5dad2f5222267f993a97d0512973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65974 Malicious code in vida-ongol-ongol1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5944ea58ae855aed265d99761ed784449c6c524f0473cdaa1d2a368daa75fd57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66345 Malicious code in yawning_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159284c7eafbf304501cf47bb7a168f46069d25c209a7b0d3fb59260372ca036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62542 Malicious code in dian-nasi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c54a7164e488998a7bc70ccd0a6b219d1743c610659d20b84a5e733f69c474a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63959 Malicious code in laila-keripik8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbcdf6a15602f6338b937fcbaf0a3fa6474c0b8f57a555ead56bb68ce5e1fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...