MAL-2025-66596 Malicious code in abundant-emerald-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfc002b9f96067997002d3bf313df8983692de21ca53a8743048fae9a30ab24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70209 Malicious code in raw-maroon-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254e5cfc0d185808744989d6bd880d75e1f8a060635b7bc29df50ec884495e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70107 Malicious code in pure-salmon-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69f23996d37bbbda17b7865bbe9e4910c1c1c57c957d4ee9de54f1f1bff4a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d797c6b5d780b00267c0ccff59140df7ef7024c8fc7b966c6f40e6b7b671e039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66798 Malicious code in anxious-indigo-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb72d977790c508ef97e8fb512e4661f385874d01ffa0c88039113fcc763522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67043 Malicious code in brainy-tomato-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447519bb24a15ea0fefd750380d1c0950f555489134aa2e73ebae574bad4b381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68782 Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67671 Malicious code in defensive-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5635a35573ffca90811fb73666f2b012a7a5aa25b05950bbcdd6c400c44f7155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70524 Malicious code in selfish-sapphire-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a2e6d69cfaef6a5e282405835598868de3351d3c81df90760eb667ce9999aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67048 Malicious code in brave-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d467d38ef61cdafcfcc163e771ac9688ba2952a03605e694fe309e09fddccdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71023 Malicious code in sympathetic-aquamarine-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39b35a915552e0e8e688f43df011a4b9b70e8c263d32412be3c7c17d35b72c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-lapis80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df17a2942f6fe5397cbb136218ed77827cf6a57b3e07ef2fa581483ddffb6fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-mieayam57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83448c649381030849c73ed77a3c3e50907f6a23ed9fa819cf13fdd8f15f6467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7dafcee432b443256c641141c827c4d7e4e5ec1b4656250ffd43379e8a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-nasi96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f3c5a9cbd55d68402e8a379a385722a8c3a3ea54365dc4cf739a7efd075bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed2fad885011a5d2be528dc1b0d020c89292f748b74a5895d15d0c7952198b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gepuk82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f79b12273152e738995d437cfe64f5625454174ad91e2de804bb51eab50da40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gembus73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 794757d949159076d68b6ff6157a214b163f439b65a1d47f7c56fe2702e7d76e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2bb973f7a540252c0a634a2e0b0b8c0a21c633b68dd7304d24a27fe5b1dfde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasi31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7cce7f2e9cf638ae25c5ae606c8784172519d05e9cfb964441eee06f193d9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...