MAL-2025-69018 Malicious code in joyous-beige-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2d478e3e13ffa60c1e296d83741c9cebf2dd3d0f46d3bf40905df7a99d164b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71112 Malicious code in thin-rose-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab01a3d0ac1e583a11caa4f003a308a65807b6569e7e1175cf36e5946a6ab03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71665 Malicious code in xenacious-tomato-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf797140d786549263937d29a5791c8078010dc1389c3d0feb019e9764c87d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67445 Malicious code in continued-chocolate-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f2fde06d448f82543d4935ac3574bc93a68f4aed75d4b4545c06cdcfed666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70779 Malicious code in splendid-indigo-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b7114e116cb7fa93ff32eac3c55e94d83190f3837fea48ba5a55739bc461be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69252 Malicious code in magic-sapphire-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6818543d663edafa30979a7a6c25bb834a995313e115ecd2f74004daff96757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66613 Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70017 Malicious code in prior-gray-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef7b1ed63b8c35bf069d29abb82371034d7820707b99b32c72a50b304037655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70055 Malicious code in prominent-indigo-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b5e5977685307a6cb869299e581d8b6779cc969103e1f0a2dbc2e5adabf2a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-ikan35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c2b043a2b995c309f9fd5ca7183db9400fc66306a4a9e09cd49e3f228e550b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7ec7ef912bcf1b6741bfdf044d04ced0b41ae6b9313fb99831bf3b3cf98666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-pecel32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22f81980ffea1d50e5a9d614539761271b82de864f07000f267f0fa12a2b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-klipo92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e2fd33ec011fefdd62cfaf35baf6dbec079e167955b79a59643383cabd36ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d9aceff8c9905d14ffdcd30cb2e157c4821e534c239e7af1d2d17f0ca59795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-kue69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb340c6c64e07fcef33cc2d0435ac9ba13c5a44f955185eea2aba88c6120256b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ragi5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a9790685bed7b50a6cf6b853404685a8c5a2fd9fba15169d41e67b15d8e1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-tumis25-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8c817a930f844eb4ea4a7bb7125d27d422646e67a80c1c36ae4c9472d841af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gado-gado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f7dafcee432b443256c641141c827c4d7e4e5ec1b4656250ffd43379e8a4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0f7f65597e83d7ab6cddd9d74088eac385dc36d1b098239be1118c3ba20f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-tomat34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd7ab5b2a11838f2d062e575ae2328f33ed77c12d032eaacb1bb31e730979eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...