MAL-2025-69516 Malicious code in mutual-plum-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dd0ce160031cb611132b6f1e7601cb682d5b10cd5962f061b593085644d205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70754 Malicious code in specific-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e8981ac8d6dfb6a2c43c9cb57d095b077f25272bdda9aab002af736f9f43e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70410 Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69430 Malicious code in missing-aquamarine-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8b08d5338e89f4b16d7ad6899d5d38a5a11a812c99dc60669e423bcbdc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70058 Malicious code in prominent-violet-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a069e6e1c9ce2d9071d762bd9859b83c4697f7abc53aed31692f585522ddbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71375 Malicious code in useful-moccasin-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325587fc8f0b49c217a688ec74016e2f287131904dc40c47e4061ada945b7726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-toge22-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e609fbefa1828a9f3a214d5e1409ed71419159b58c017c5550cb595ea8307f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-otak-otak14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a210953f65187be6302be9c28e22ea54a86211e0b653671af93253e28e5da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e42dc29a8fc526119356486ef9f10d5def9ab576d6fa3583c04cbdc4797e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-jengkol36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae999f1f6f665ff956d2413d729fe363e7dd2087b705a4f1f99d0620e8086511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-gado-gado50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e103c16b98732508475e11b41c4e1612fc888638bfb5495a2346c11b5680120b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf55d3be2c07b1c760eb867ea40868440946eec5bdb38ee380c2238fb094f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7c8f14d9ad54e3bdb913853a33e126b2fe58ebf680af4b8036c39a35183709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-semur60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac682500f05a8cb3c08d324832279c46e2546968539118486e191b4b9aae44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tahu69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8081fb6ce69987e2f142f6c9e2d65efd795e7bfeb8c5bbeac49e93b5b226340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kembang31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543f71a339926ff169d562f4410ce676c546348fdbee56c23cb36b2db621a0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7178c28f16a388a50c6a57ae5a0f58abccab7140f84abd8aaa23c43866739908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc7d5d6833290d3ac823c13e21167524f926b3706062e416459df6479636ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-gembus44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15820b8e07260edd04734e875780f94756a9199d635a8fa5f48f96e1a534a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kemplang35-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a086df54e0760f2451ab5164d77e195e9010a5e9d18a369401b2d7485a0d504e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...