MAL-2025-67009 Malicious code in blushing-aqua-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d938324acedd4726c66308424ba3ad390f1c4cf8213effaeebeb9722e76b284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68214 Malicious code in fair-aqua-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa0954d82691215f2475a9bc231a3f0a48559802793dda8d0f834ecb6654253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69269 Malicious code in major-gold-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2205c93dfe74e7ea41cbe47475ffcc62cf7d136ed2bdbac95da671dce46af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70988 Malicious code in surprised-indigo-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f277c7ac6c98d18136673501a714f7bac4d7ba4870864df42f90024096b1c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66569 Malicious code in able-amethyst-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a59109d62173b519cb9f936dc7cf460bdc30c2733353bb367709c89a5af2a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71754 Malicious code in yucky-moccasin-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e67fbdd254c3379795abbdc885726a08aed5e282ca7eeaa0637146088f306e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68003 Malicious code in eligible-peach-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e767570f9898b52442a8e4d3cd107f3e359dfe570b9c7f006e3aafc420f9438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-serabi57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8391f94e2641b7b8280e5486e597c3e5b320f143a41769874ce05305e228ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f2858f05f5b93fd3cc38b8e9ebd800a211ea7c7cdcaf970f696ba996e2324d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-ronde49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf0d123f97398ad8851a9e30bddff68edec51ae8987101c9e392e79791c06f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-dradag30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2365ef089cd2a45ef166ffe46adc8f64cb2cf689490e7c994f3446bd34d180c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-naget71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6daf5b38e518c127d093572b540062a8f1f31d2962560b28704a467900e04a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kembang98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c508694995ce5b45d098779fd9d0eba925dd9f30b0c9fe6fd24f7b5df303dc14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-asinan18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f149bf39387e6b21dde289eda2b01405024129ba916201a0d84cd7647dcd732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mangut3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bd48b832ca4264421c9d532e08cc4e717f72fa1baf2091ad014bbce71f1867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-serabi49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c861e43357a210b9eab06649030b15b3663919a5f65c4e1541f5bedfce31f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kentang77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267bdce9f185a09c7f6e87390a1ebb1f28b5cd22fbf3670871fc405b91ddae0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-lepet78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a2c9fcb61f1a79b1b8654c55c0a8aa8c76434dec5ca5ed75434d55ebcbf0305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6163437907fabe3862003c2885031f32d98a0f5388b20f67bc941b7197cdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-keraktelor2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf578ba627faf705334c6deabbeb9ba78e884e2c8675fe31c016f7f5998d0bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...