MAL-2025-71440 Malicious code in very-salmon-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f978513608076b5481806fe9bcc24bfb5188f4c10dba9b44c175805234f1d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic-amber-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fc3cd0aea7fb4c4b0158bde7013cda89657ad97b5787257f0163766755a1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69729 Malicious code in opposite-magenta-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06238d448a72a1e239cb8ee789c5045a1eea31e51094f6611cc0b7561c17705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest-azure-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d1f11fc255e5b11cd6a8e8101d607e076d97ce9b67c1ee15c524bb867bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest-purple-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d899bce0438bd2931cafc52505ffdef936c0dce2fb2598bb6fb7f74ab92c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70495 Malicious code in secondary-tomato-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0917210095ffc5c7a3f3afc4f4ca3a895adbbf212de97db28fa3f9a8840470e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67016 Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70945 Malicious code in sufficient-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36676a6917899cbcf868109ca22729546c515830ac75ce5eafaafcc1bbc9537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69693 Malicious code in occupational-violet-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396e17e3922ba02210663c27255408b99f97ca7c6c3992bbfd69b3b32ab2c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69102 Malicious code in legislative-plum-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c837b4ed40d9f1e5bdc5bcad0b0fe3106f258d4ac33639941ebf42c847e08ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tongseng36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c6407ec1a18e9ad8aac25698a831b3e0e73db155269e4d27bddd0f9693df6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-toge1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1fd1b8df3b6586f502c3ac3c4f80808ee3861dce3c43058bf075bdbd3f2e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gaplek51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d006e4232b423ff962a1c326a5e8a050de0508cb16eb7a6e366c5fae7c3cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kentang57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f5e194dbec39deaefcae5736f51ea5e24e657f91d04daaafeaf99af1757a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-nasi6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d982452b3dcf416224d7cf0a862b24f13019c615147917e8087c49051daa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-tumis35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ea049a247fa2d8372488967c0030aa24d30d8b17d5dd01720a407a30649b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-naget43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2508f13f6b83d2448532e4ec00ae42f5904186b6ee1dbec2785e4e23b9f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-rujak37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944d9f2e449f03b0d894b0b43f9bfd491cc96f06ad1718fd3004aff143c56383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-nasipecel77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98c778535e3191036b6452d47fa4b980469bfad17b2d9673dba731347127f894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...