MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-yellow-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf0585845336e6aa4b90f78128dc3af918986bb33450dd034b45eabefad5e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68219 Malicious code in faithful-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb044927b16c6649707b6cb828879fe8e932b0f1fca2aa739cb67fb0f7f049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive-white-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25ae8ad81460f788e0a350c0f4029dfe3a16ea5b01ffb294d21178786d0942a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable-teal-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1316af5c1cb60200bedab9601f711af00fe8cc03025e2bb6ad8051a8e188dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69048 Malicious code in kind-beige-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed8c6ea8ee89b123c3cc37f8cc867f590cd2faecc593e870a802a369b78d241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69355 Malicious code in melodic-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565d2c815c154dde1ea261d49816bbd8e859048378bd83a2c020604c2c7147b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69943 Malicious code in possible-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f867f4596ab316b03ddabead61e7acdd383bfdcb7e351b7352b7ee6ce0fe0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-miebogor23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69df7f4be44c55e8e6aa7c92891062426d621aa5fe466bac5db634735c0931db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rangi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cada092cdd6adf2ca5011da61b197b48cfdaeada224ab8187f2e29041fdb136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69aa0c204a09fa841b33428aa7fa0f1497ef17b98a92fcd3c9ffb0d97422721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8957884ea6a34776555e2965dd14338d2eca91b9df8b2d4a0c6986f46db4191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-papeda84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e18802c193a6b0ae9035e24c2c299fc9ce57bed00fe3f802deb5e597097e423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64525 Malicious code in novel_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13897cc3315a3ced587c118a7f9bafcae5a091456f570287daa05e0a7a1a5c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64560 Malicious code in nurul-naget43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766b70d7224dea3a9093ce7104a0f68a3ed95961bd3c0370a1dde785da562670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63852 Malicious code in kresna-menjes49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96283f6564b7b56796d10e80facc23609b5f60659cd3fa25ca082981f24f7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61901 Malicious code in apparent_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a46f24548d94ea178e894258ff1e9504ea9bf8d8d4d21d32bb3ff9443461d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675c29e1f9d37f38d0c17e05be0ca6224e6122bae0f494db11ed1c041ecfdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-sambalado98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5200c4c81a5b99c81afac3ae7eed5daaa15c5aba33f32711f5be09915730b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65734 Malicious code in udin-ruwet40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e27b609a3b34fef7bac80c5d53ec81997ce5a5ec77473d253a74f3362e38b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...