MAL-2025-67090 Malicious code in bumpy-peach-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9086d8a078553ed2fc9ed9c6fa9b20b45c23276c060050b403cc24bec03b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69556 Malicious code in naughty-amaranth-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22e476a9f2d8ae31c482c3cd29a94773430e8e18c960b38f3732097aabb5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66832 Malicious code in architectural-lavender-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edacd8685993c4701d63f3964ea8d9379d0c028b7aa4ae74e7a33c8525c2586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-amber-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f4557eddfa98f3c2b08d9407da7f2f061561c6543f1bd6e5f02b4b29c10303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm-peach-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfa8aab3ce401b3098d443a39e25313b00d67c28616431f7e9259ee71de4e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-rose-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdbb6d4817666074de895b4a215b9771475cf1a4f77284c2613d3792942870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71708 Malicious code in yawning-peach-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8262189f860b7fc0cc9cf4f43a8d0e04969f4d1c2f02faf249bd35292b36bb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66846 Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-magenta-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbe99cc750fac6d8c04139fc317efb47e14760aa6abdf994f70f6cd9b1642dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68131 Malicious code in exact-jade-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6c4da6700aa57fa4a32bb32a4290c6a36c60c5427fe68ed318e9490c30fc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69093 Malicious code in legal-harlequin-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cc360feeda1b4538ddf6f00720187307bff9545511f5d801b2b33253f4fbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahu68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee68437d59c2876b81faff480785ba2a070546fe964a717bb9e0bd59d2ef7edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-serabi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6243a31b4ae541c00852bb884c679c11f937818c80be18c98eef73dc3c8d82ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63211 Malicious code in gross_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393372d3559c331cc6be2999e913209ad0f0b2a4f7b785ed202275a250fad77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63037 Malicious code in fitri-telur63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4965dfd3d1e4da73747304a73683f075dcbc01e9c4fdbc93c0bea196e1a24e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99207b5e56caa247fdd6a792a56add4610c705180d157d2cad137a205d6b8712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-jengkol58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409b55e1e8839a10cf83348621d3e6dd1dfeb1571f1f52984a9b8f1a3091c409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-mendut87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2535e4093f577059f5eac6e78faa0ba5ce57d09df1b8ee85a9d9f083084cc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-bubursumsum81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d8fcf1ff47c23986d57b73d7dbcc0f233513e72ce2718fd552fe70354b8e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65074 Malicious code in riana-tempe57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 141a10b6df0ec62e1268bd0cd8c213fde0655a7b06e6b4133cd152c49024c1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...