MAL-2025-71109 Malicious code in thin-fuchsia-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377dbf16e1afbfafb4d844e40da7927a41bd66f4a032158ddb398c8c2222f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67473 Malicious code in conventional-red-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814aa4f0dfc74d0fefe9c5ac4ebfe61e0fc891e5368bc14191c2017623391dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68596 Malicious code in grim-yellow-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6516af53b000cd45d29855cf8bd69875a1d222ae586bb210f125389c0eb24f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague-ivory-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a98975589d9ff557ab6b2041fe9348b554b9ab09e0af932951a101e9333851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty-coffee-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a96d740a80e4ce8e80b4b77bddf107176b3de94ddec2c14ba359559605fcbfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71509 Malicious code in vulnerable-gold-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d5724174c472617ebce46ef640bc02925d0ee131cde1d06944e0e4ae727312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in normal_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182e94620b61cf582c91286d6822fe4222a16744d191056622ed005d0c780009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-botok50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfada911c7899e28544eef8eac66ff4a91fee1ffef59700bcb9200f860603c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-martabak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb35902e13ee8c604f2b41fac49ab7446ae92f9e447a26f5709b83e52e97b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-botok81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9caa0fc7e979820cd2b384491b41631dbf1fd37a0a958d5fdd262d9267a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-taiwan15-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a145fb48fa744fff3f243231abdca8bb0fd448aac418bf735b1d2baadd443890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bakwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e744be4284be3c16c7f7185fb99fa639d8673274cb2685d76dccc120ed18e1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64208 Malicious code in mahesa-ubi10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ead93ea5562740fc88e803f31d1fb22f583f7fbc11258b57bb6ab9e3c6bc71c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f6b54bae4509f5337e897b7df29ff3026f1a81deb6ff50a788e766109a7154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-klipo80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965ae977e0c97404745b02956b69fbe813a73266a2d9add4992778721cfd8478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45be27ccbad633fc239eea4337f1d6dbef761700239a7c7d9a10a0d63c8b8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60164 Malicious code in consistent_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f356ac3bb620efb4c870f6ece0296e1793d9673c8a85f6b548b84adb06ad0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60442 Malicious code in exuberant_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01486ad7ef747c86539a50d2a6ecdc152260f792640a47d0260290092e76de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60474 Malicious code in final_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5219578b76a2cf0c76e7e92fcf0f72ce771f8fdea56fc6d59de589c4061d170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56491 Malicious code in gita-jus7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580a2c75ecd80353c272792e2d56246bbe673b8c1460f3a7564d803389a9cb16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...