MAL-2025-67574 Malicious code in cruel-jade-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee4982434e81033dd9fdc0ad9ee2e29cf8150729d9f6b9cbeef2cf32fd11795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70857 Malicious code in stormy-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60b667e6b7ef5491c0fedd90407e11fe537c159ec954e52a83d9be246aacf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67420 Malicious code in conscious-yellow-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d241907818e89eb964c788fb7007e876ce29f7268d28706e72fe0477d0b5bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67004 Malicious code in bloody-pink-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25ed4003be9e5a6aea885c3e232d10f786af179fc981e8003a601af3f70a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70896 Malicious code in structural-maroon-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f3f80213b2a5d415b6a95a93c166edd18f8ef8afa677448b349648174126ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66755 Malicious code in alternative-salmon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2ea7a48712e7659e37c8c0fed2970990a212875866f0b3e418cde7fcf18c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6163437907fabe3862003c2885031f32d98a0f5388b20f67bc941b7197cdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-lontong69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77924ad3e57ae2589859b93649e8c26d43c6d631d377a7c105f8ac30604152da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-brengkes47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af68185ab073391afde48e7119760db07e34f5eeeace901cf5ee194f8d872b51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-jengkol36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae999f1f6f665ff956d2413d729fe363e7dd2087b705a4f1f99d0620e8086511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-rangi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2970d26ed2b944907c219a3566e9fffcb10cdeab25ecd7d06c41b3e727721db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf55d3be2c07b1c760eb867ea40868440946eec5bdb38ee380c2238fb094f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-soto26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf2eb3c3786d9b9858b96318a7ce84303bc46cd0eefd0e0a16eb322846a8b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-dodol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7c8f14d9ad54e3bdb913853a33e126b2fe58ebf680af4b8036c39a35183709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sasag86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c1bb162cba01ecd6a2d92e945baeb9b92e8845228a3fdcc9497121ad6a2fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-oblok42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4011c11a053a14277c3159d64fdb89ac9c6fea5eb0df246e2574dcfb2c28bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tahu91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f672b6f8459674162b432a12052eb08770e4e6b60f8eed7cf3c317957f45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lengko73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604ade10ee64368d7d4b1d934baa82947eb5b42fe27311997e182515cdb82f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51a1b7f7f6c0ebe5116f2bbda8d622d99ef862c95f3d81d08ea49175d766a8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-martabak46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf164c908951233973f07aef2b49f3fa3bc61f274c46ff23f37b7bd582304eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...