MAL-2025-67015 Malicious code in boiling-amber-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a776f8453a17b1080846676da948b3f62849a0618cb4eec19afa94c99aeaf91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-purple-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cd6de8241397b81009b12c1321573f9aa840a0a6b1e0d04dc36cced5a3a4a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68240 Malicious code in fancy-apricot-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5397122745d5e34b9f6b1ffd9fb99f3e06103322283b2d7674ec316ab4fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66916 Malicious code in back-harlequin-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dbaa3e1100db20ecfe7f2829a4ec47d3c5b5340fe22232a1fa696af052ce75b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68295 Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62011 Malicious code in bare_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b525b7da07ae93796eeece3fd2184199be6e948a8da55d2b8ee523c17cef0957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66087 Malicious code in wati-taiwan98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40706c39d65dd72245141766fdd76bcdd24fbc46ed12e159185d233275cfbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63100 Malicious code in gilang-bakwan39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f59fa8c1be1d145376b9413d4645a840d547b68dedd8ea982489ffb5137d6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63631 Malicious code in jaja-kripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61451354f22e4b50c487438315366b35fdcbd5783cd05611db74aa4552bfcd3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tiwul53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d39ccbfcbd15af58f1f6f9ec6369844155767bcfba275bfb8e12eebd14870f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d99aaf7259713c359faa865c9167203b423b88b23e232aa76b5a414332bf58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53b8e5bd7e97ee856d01485c4d04eba0d82b6aecf212e2bd69b9dbbdc5d628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60776 Malicious code in logical_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caebd1c2e0d5e61ea2445cb2b5956c76028e462dd85cf4e03f27ebdf22f7ce91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a28b06370bbddc9a2a15fa7e2874f95d09005544e9cf16b9938dd1927ac55fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a46f845f096e9187208a7a423c1dff3c74611924a92ad9c58b2cda8c342ae10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59375 Malicious code in vulnerable_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a4cc8f5823ea924db211174885ab26036f12298e5336f6d671a73d18eb92bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-rangi86-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd49335d8c9f707ed334e0f1c973ef27468fd735a2156648f9dad169dd133349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bubursumsum36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baa6ab763b3dc6ccd9152ec5c6d55bf5d2187bc1b05a0378345290ff1b354fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-rojak71-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35375966e5048ac0177a07a2a4c6a6110462483fbf822e49fd55a6cd986ce81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-moci42-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf20a1e53a17704315e5a0fe31491659484469d04f70c513cf46eb267a04e444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...