MAL-2025-70788 Malicious code in spontaneous-salmon-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2004768df0ca8c74f5bd40db3786d809ff47836f9e9ba0bcd47de660ec5f4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70583 Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70907 Malicious code in subjective-sapphire-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada4e2ba0808f82c43ff4bd377c7bc0eec1da8a3086c961d89ee46dc31275c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69838 Malicious code in passive-tan-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9646bf6982d7520b1864edb2c33dc58a6b0b9dd0ce5a06aa7202ada2dbdae718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67986 Malicious code in electrical-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f97f90d5e3c008a62899a5db9642d30413b19464c04b9767a93e0960a2f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69366 Malicious code in mere-apricot-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf02c29eaad01cd6dd4b664c09c97023caa50715b2a8543fb18f97a8b018c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69531 Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69430 Malicious code in missing-aquamarine-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f8b08d5338e89f4b16d7ad6899d5d38a5a11a812c99dc60669e423bcbdc157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67045 Malicious code in brave-blue-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a3d8af2d905f4e3342da1bdd3b70ea17fe2ae13b5172149afa8c27872929b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-semur8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83216a3b9c9157c594ad9b87a58f060b532c6e37805bfb3a37137de361c3339e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-nasipecel58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f69fdae4486f721b21992aa799fd6bb29faf074899d37e91a669d22984669e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-pecel63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84691ae6ff34672e50aff802b412a03ebfd98e3901e86962f538882754469771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-serabi88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41040110849686684335b7b0286cbdbf76e6452c9189775100b2a74c7eeba2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-peyek99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12472fd2b496786d03687661ed8286232501bc75374fd436b24f83759f528bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-kue84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ee04476d39e5aacbb03e7fa96fc02f2a579aaa912f6ae34421b5b389b0cf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kue35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de621d60d98213d90c3190886f21e916031ca0f88d1c04a8035ff24ea69c0fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rujak29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266562350188ca3fb8ff061aded5187b25a1ff2523fbb5d0bea27f7fe402596f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tahu79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87275fa2a2bae0a2cfddb18f8828a9d44700f5a7101e47da2e2af743c8305fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94770332c555be144d07e0e858a31373d463ae0a93d8d99f9c36317718d78d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b1861fedfeacff81bd60060695357cc78e9f211df06110e381b5d6f07a9481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...