MAL-2025-138640 Malicious code in crowded-coral-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bd82b3629a0b84b5e83f10a271821958279c419583ffcaeea63638198a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138947 Malicious code in prospective-indigo-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615170e63c85a8c696264d65ce77a67dc95e4cc3fe9d79788c1bc5b8e65950d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-emerald-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd7ebdf01c168f7afc3ec5d5a1ba2a30e2d31f5b04aa30336521f00010f12eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138601 Malicious code in brilliant-magenta-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592164f2b0fcc3200956fa782a2a9a4ac824ccefe8eff9705aa4b2b85c52a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138815 Malicious code in involved-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-tumis31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c2c71965d4ed17094b9572b34a0169dffd6d3d1a01c199e9c662d11be7e2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-moci56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478c77509215c90db4f2105e0e572c30370ece3dc0c009fa781c16c006a8d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mangut11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f7957f21627a9bf8ae7c91783a1da5115bc6ec198f2f17394efcf9b1ff5500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-sate23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2c02a324f402afeccfc75c6908e8a1184d05bba9aef8fe554c7119f79bb3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-getuk93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da81de48babe6cec334fc0e98ac1bc0290a80e29ec8b0fcf2c520362cfa89d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-serabi59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7732773f353cd9439c67274e8736cf6030b9858b1a62b19a5c53403d0c0f80a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1ce06978d87df3bd10fbedd315328fb5e0b51c196d5e91b3ea2072d36ec4e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d290d2861b4310406f8c5d5703036b3c25962eaa480b3926f0de36fbac15c7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-klanting25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8a23133e91150b2df24fadb883a5c9c25f4f97083c6e4a18037b3e7f50b41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieaceh16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eae27a3ade4647a09b60cf3d79c87613c9c1789236d96fca5e922407ac26383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tapai100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6bc196d1247c78701565c629a395ef25a3e74a96474473d583f80fcd6aae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kue52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cfe777c7417a29e99fc8e3064ef1e3bbdb5ccb5ea678a30d121c94dfbead12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-teh89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2ca4396a239bdb271d07449240a8693c6024c3d5a71aa237c6eaf26416bb05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-pisang22-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a359eb9434f6595b8e011d52e3d01aac83f1714cca3ff8cbb2015c1d76977eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...