MAL-2025-69574 Malicious code in near-rose-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc42bb732ab33de9de4e60010ed2f863080e2ae022367345e2dfec5b0e438742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71066 Malicious code in technological-olive-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842d4e25bb9f194a482745f542216c9ac2ffbf6a6d04ef7e75ca862dbea2038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68179 Malicious code in experimental-peach-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d178b33c830f8d4c6efaf63d3847dd8805a3b52eb4eae4dab49c6aa2e47a00c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-miemee32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4742a53de616ae919123b4de3ea06e53bc61f174048092525c54d8d70dc5e2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-gembus69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea678e1b710a3e6573757cab1e5f6dd7fed7112a454faa0723618ca4a76a7606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d267ac2c7eb9d4939c93ad7c6332989ac9a74e55eb9218b97fdf39f21f54ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-mie95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13157e087340d606cd1fb0f6e2a4a1cf1cd314f20f3f7bd556bbe37ea829f139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-sasag98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab55e6a0fe34b5699883e1bed5daba5db408e701ab9bef210773e6af06f11e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-martabak54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a35d2b82d5dd5867e159f49a6330800341909be7e3688824691ade9fd4c8838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-mie41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40593967d8fc5928138b0f652d1571175b981dff510a7d73c087429bd721391e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-peyek62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39df019f775fd559367434ea428391a2ec4adfe002591bc4293a785dff31106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-gulai81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a5eb49a4c4e7cfc10afa0907c91027c61b4562516b8fef01a79bf16a009bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kupat3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1dabc1979d68e756ca9c5b7f99cfac79f293e008dc469447416b9c97cf31eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fef5a08a0f3ef9168fe0c262749dc04857f99bb0bfaad4aedd9fd3f35e186b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-naget96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e829c567f6c4926e2db856ac3d0eb1e291d4d33a90be8a237ab2834160d87f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784ef5ee313871a3b230c244d478ad0bb7c9b11bfdcb979c0dbe3b7736da2eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-menjes96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306749d8f05fadd7e18ac4f13e74b6c2ffd7a590e90a12c974f4d94dbc765d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e676bfffea9c53aa1fa41ff92720aadb74ea08869fb8259338db80688b66d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...