MAL-2025-71264 Malicious code in uneven-amethyst-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e581fae095700711576a7e6f8a3b9288889912ce3600659c615ca855d385b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67594 Malicious code in current-tomato-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d9e506cef16bae43fb33a25ba234d7eb3565bd863fe16f392284a781a8ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66967 Malicious code in binding-turquoise-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a387261f49fba2401e82093218799ed8e9548994eaf5e4d6219d0c7683650275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69046 Malicious code in key-yellow-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae1111d2684c2a91d1a402983493e994218b28e6b1e0de16750edb31b42496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69985 Malicious code in present-copper-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601cc2294f6ab4a90ae3a9b6516b2f7cff77e65ccd5369bf256fc070cdab3359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67617 Malicious code in damp-jade-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4843b3b5ab85d0619aa1f37f82739790bef41b23f28cd54725defc40c36413e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71394 Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67207 Malicious code in civilian-chocolate-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec1167f5e94b1bfb198b44c75dc95529809fabbdddacd7308ee7a5beb5b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70590 Malicious code in shiny-lime-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de4bcf13bacab09b2e2283166b8da951d953837d83850565c04a2f4a2ab15e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70268 Malicious code in regulatory-harlequin-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4968753ad38701ba2dfe12d95e50fa0c65b03487d7b4e6f8539ab31338e596c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70777 Malicious code in splendid-coffee-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a91fc62b1d12053d35466b0aa3f98af9b3da0cea34ad55f598362f06513f73d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in widespread_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02ccce9de3013bc8a8ef5a9ed9e14ef3eb92e18cb61d5e7decaa0c14d1677f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-klanting15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2554a73496da9ef2d7c373c59c8171eeafb47b8079c2aec92ef49299fb15986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kemplang62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee4da7da52c2a1933114533b367d3ac1b10ca186e7114f871fce7cecde1c7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-lengko73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604ade10ee64368d7d4b1d934baa82947eb5b42fe27311997e182515cdb82f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-sambel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839ad6cc8121b6289e2a49cd80c719306a42a9b1f59ecd443de149d7e1cd61eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-papeda6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8338fc8b8490abc1d68477a8166b557b9ea4a60a9a128c2e861c41f58819b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-toge23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8a91954c382300a26355ac78cab54635106fc3455395b931393dc4b799c4320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-peyek62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39df019f775fd559367434ea428391a2ec4adfe002591bc4293a785dff31106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-bubursumsum39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e314b06bce2e866de5672e1dd0d7550ddf4a25b14a027310fdba32cb8afa77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...