MAL-2025-67394 Malicious code in concrete-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2799c119d24251ae3ad925e7fb575fe210a6b1e49f7b0d32a8e79ff5c08d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67166 Malicious code in chemical-purple-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8be90193f105193217f54a3a8441c656af3b5411cfd14443120ecf844d4cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69419 Malicious code in miserable-plum-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172a73c7b4003e0719f1e716a5ea303e6e87dd3a4925a622a0f7b9ef11b679f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70996 Malicious code in surprising-tan-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da5115ecbe3d28579567988586a88cca7b709a9fad878b1796ce5e259b9e391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71745 Malicious code in youthful-lavender-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215abfbd9e7c9b5722efe7a6124a888e872b57e12622ed5161132fef8f2f3980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68003 Malicious code in eligible-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e767570f9898b52442a8e4d3cd107f3e359dfe570b9c7f006e3aafc420f9438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69024 Malicious code in juicy-lavender-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4c4ba1e940595513e075ee2d883eba2a4623fc012a466170c86a1e76e1452c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-keraktelor2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf578ba627faf705334c6deabbeb9ba78e884e2c8675fe31c016f7f5998d0bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6163437907fabe3862003c2885031f32d98a0f5388b20f67bc941b7197cdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bika78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7624a71d155aba3e528ed06b4317db346dfcb49b745635cf86e6e724073e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59e8b310c76286c653558d70bd7359cb617c0685bd4acef9583348b2dc4b6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kentang77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267bdce9f185a09c7f6e87390a1ebb1f28b5cd22fbf3670871fc405b91ddae0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-serabi57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8391f94e2641b7b8280e5486e597c3e5b320f143a41769874ce05305e228ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-serabi49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c861e43357a210b9eab06649030b15b3663919a5f65c4e1541f5bedfce31f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-asinan18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f149bf39387e6b21dde289eda2b01405024129ba916201a0d84cd7647dcd732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-naget71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6daf5b38e518c127d093572b540062a8f1f31d2962560b28704a467900e04a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kembang98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c508694995ce5b45d098779fd9d0eba925dd9f30b0c9fe6fd24f7b5df303dc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-lapis75-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb609f7a0ec4c6dfa271a9c83bcc62f7318e08e8f8a002531b25ff0e54d01f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-dradag30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2365ef089cd2a45ef166ffe46adc8f64cb2cf689490e7c994f3446bd34d180c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keraktelor78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2c57d232caba72cfb03d4031b005a986b227e924a7ae1ea1cd290b81ff1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...