MAL-2025-69301 Malicious code in marine-blue-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f3480b7a1673ec8ac747b5ef3b6c7f2e708648e82e25434b68e7d07fe30b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66725 Malicious code in alive-harlequin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f69e53c7dd84c99ab8c1994c0c6f5b75352b49fa75c583294a1353cea1d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-silver-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e857e75436012cd93ae040b6b7d28b0519a8635530c9d5578b7be6cd23ea2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified-beige-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855532255c4a0928ee0bec8744685be14e600e7c7b0db99bde26455813544346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied-rose-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f5d644e3d58ce9e42c5779266e2bfd7d4a037c943fd841ef2e8c85678c61543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66873 Malicious code in attractive-violet-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5310dc84651e474da95552a9bce3efb22b3b5131de8404c8bdcc534b9204d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71305 Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65692 Malicious code in tuti-nasi78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eae939a6a95374d0b4910806638c53e72d5477e77f5e50fb271cec13133335f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-gandul56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258148cf692f605c3de525cd29181f703261a72087ca077e0f4d63d0b95ac746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-menjes73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ec3d9058b434dd851a9a79b72d3eb2711c0c43f386491f42a4f6ca7f54ad1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31fca84eaeb23864d1e74ab2d9e4b1a17a27619b07c942e52dbd2205ccf33b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69785cb0c928379d7ccbac62983ef36dda423fdb6e1debe05e050001062357bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61676 Malicious code in xenogeneic_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e89077a6d76d244c09caf44c98c6e6a31278b120670585f6964cae6fe9aa512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60167 Malicious code in constant_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2b8394b9be04e94c09c7b17eb554c6b49f738da04cf62a922b90dee1988e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4612a00f6678ae0de68dfc92da254bf6a134b81028408be303c72f8981eef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59025 Malicious code in tuti-oncom86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d654b5d8c770acf5bb1d0cfa7058cbafda24519b01daeccaf23f9aaab090176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56439 Malicious code in gastric_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16a353f9cdf8ed7955212603f039e06e3fbb0eb4a20f35bbbd6553f24ca077c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56430 Malicious code in galih-soto63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5ad0ecd11e3ab5601558098745bb3d0f5d9cea2830ddd1cbec5400d5ed0045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56742 Malicious code in hendra-soto100-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77805971f861242521d4640039f8776ce517eb4295cf79889742ea41d021e0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...