MAL-2025-70899 Malicious code in stuck-maroon-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286aed10b8819d87d820dfe98dd160430ff3e5972ee578ceea5aea2fc8332001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69556 Malicious code in naughty-amaranth-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22e476a9f2d8ae31c482c3cd29a94773430e8e18c960b38f3732097aabb5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68131 Malicious code in exact-jade-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6c4da6700aa57fa4a32bb32a4290c6a36c60c5427fe68ed318e9490c30fc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67090 Malicious code in bumpy-peach-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9086d8a078553ed2fc9ed9c6fa9b20b45c23276c060050b403cc24bec03b17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66846 Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70152 Malicious code in racial-amaranth-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f200330347de6690edb8cda654e69b76db589ac0420ba01df4017a4b92808ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67482 Malicious code in cooing-gray-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881ca8c454ef1a6736eb745998a4e14080b2aa14beab979af3880d6407d3559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68410 Malicious code in frail-black-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111204f7e92b73141c020c30724d2433b1cdb8b8efaa69b06100169c722f6800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69093 Malicious code in legal-harlequin-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cc360feeda1b4538ddf6f00720187307bff9545511f5d801b2b33253f4fbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71708 Malicious code in yawning-peach-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8262189f860b7fc0cc9cf4f43a8d0e04969f4d1c2f02faf249bd35292b36bb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69734 Malicious code in optimistic-cyan-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337c04fca762a8467ad90d660a8de36858da1694d0e2f4c3ab139d99891f25b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-mendut87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2535e4093f577059f5eac6e78faa0ba5ce57d09df1b8ee85a9d9f083084cc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99207b5e56caa247fdd6a792a56add4610c705180d157d2cad137a205d6b8712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-dodol83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d15f1790cea544054386aaaeb13af5d9a1fb7ab5b1e0f6971d46b655626198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-donat98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8412609fc550d7220a3c72133acd8f3d29b0ef8f17d1e9f9678e95a5dcc645b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tahu68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee68437d59c2876b81faff480785ba2a070546fe964a717bb9e0bd59d2ef7edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-serabi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6243a31b4ae541c00852bb884c679c11f937818c80be18c98eef73dc3c8d82ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-jengkol58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409b55e1e8839a10cf83348621d3e6dd1dfeb1571f1f52984a9b8f1a3091c409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-bubursumsum81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d8fcf1ff47c23986d57b73d7dbcc0f233513e72ce2718fd552fe70354b8e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-telur81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092de52d63e3ab9f4777f5c4fb7fbd62e251cdc964ffbbc8ed19389f4eff5a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...