MAL-2025-70213 Malicious code in ready-emerald-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be7771e0b7da1eedf443beedf72757975987e2ed349704793fb5bd43230240e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68119 Malicious code in evident-red-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68107c03ac01e909649fa556dff7a904142956bee71ee54979da9772867430b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71243 Malicious code in uncomfortable-gold-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db70f00ac6910acd6339932d13510e140271a08f6d7c01ea746a9e47ebbf511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69029 Malicious code in just-gray-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7873cdf2493f3e62b43adef4234795dcaed3b9b8d92ce960566ef96efd436dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70382 Malicious code in ridiculous-sapphire-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17ebd3e2509d0de3aa3369c7e819965ed5cd937df53c8fd552e89afd0229170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71156 Malicious code in tory-lime-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39dafa56f50110a57bde94c2e58bf86483cdf06af5bb390eb09732172e381b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68567 Malicious code in governing-amber-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050f23d03776f0191dcebf0da82cb7e63a8324e8b4ef3216d720166738409510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70590 Malicious code in shiny-lime-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de4bcf13bacab09b2e2283166b8da951d953837d83850565c04a2f4a2ab15e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67614 Malicious code in damaged-brown-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7e9ad811ee7126d7567fbe41b823891984378f252e95a6e598b30e8a8f4249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69905 Malicious code in plastic-silver-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05af4b90223b9d68bc2132ecac020889c9f11386c5c4c693912cc7465c4cdcf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying-rose-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d3002f45cef4b61af531db899b943c64f399a6a6ea6204a4c0591c736b56cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68663 Malicious code in helpless-ivory-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c076ce1f3ed7ab09274e3630928c51d4cf51ac9c1f23a6f73e5a8e95408601a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-klanting15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2554a73496da9ef2d7c373c59c8171eeafb47b8079c2aec92ef49299fb15986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kemplang59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888d5f8c9af05ec82c513bc4ceefdd342616b8574f758ef10d41551304e08550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-kue30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655abc4003dc2b8a383e96dfe6a4642568218c4f7e399c3542fa78e4687ed7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jengkol73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a06d12e28f22210f57a38fbe43ac9508cb209d8a3a082d374ee815c9575f853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-lengko53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8582f84d012cc4fa343b87e5c1f1f8201a4b27bda9a541c6d78c222522b233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-ragi12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2908dfad582745a6a621e24a5c125aefba91d307331f6650f436406233f3490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mieayam94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a1fc52f1f67946c41b60e2297b9e9d229f5210ba75a1be7db4d603d9d1ce97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...