MAL-2025-71416 Malicious code in varying-silver-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ba0b3bbeed6858ce4b5ffd4bf8d892460e4f9dc2beca25386dd44029c3c67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675c29e1f9d37f38d0c17e05be0ca6224e6122bae0f494db11ed1c041ecfdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69aa0c204a09fa841b33428aa7fa0f1497ef17b98a92fcd3c9ffb0d97422721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-martabak42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84da3c604682a63e61893b0950ee4437213f23789ab816dcb2a8d19b135cdf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rangi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cada092cdd6adf2ca5011da61b197b48cfdaeada224ab8187f2e29041fdb136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65733 Malicious code in udin-rujak9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f533c2983fc2c08afbc775671a5247fbaabb96e64e502b0fc3b9066c1646edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66433 Malicious code in zain-rangi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2970d26ed2b944907c219a3566e9fffcb10cdeab25ecd7d06c41b3e727721db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64312 Malicious code in meaningful_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7cfa22d8c1fcba8abaeef8635780de0a517bc428034d5d35394139ef565a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-sambalado98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5200c4c81a5b99c81afac3ae7eed5daaa15c5aba33f32711f5be09915730b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sasag51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d55194eaad259379572538d18baa0d11a07d811f398b62ae4819f0948e87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61901 Malicious code in apparent_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a46f24548d94ea178e894258ff1e9504ea9bf8d8d4d21d32bb3ff9443461d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64560 Malicious code in nurul-naget43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766b70d7224dea3a9093ce7104a0f68a3ed95961bd3c0370a1dde785da562670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64525 Malicious code in novel_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13897cc3315a3ced587c118a7f9bafcae5a091456f570287daa05e0a7a1a5c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-miebogor23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69df7f4be44c55e8e6aa7c92891062426d621aa5fe466bac5db634735c0931db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-papeda84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e18802c193a6b0ae9035e24c2c299fc9ce57bed00fe3f802deb5e597097e423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-taiwan96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5893beda562a7ef230a42bb76c1e2c8a8aa729048f516e5ec6644e72cf4a3cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8957884ea6a34776555e2965dd14338d2eca91b9df8b2d4a0c6986f46db4191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63852 Malicious code in kresna-menjes49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96283f6564b7b56796d10e80facc23609b5f60659cd3fa25ca082981f24f7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...