MAL-2025-70760 Malicious code in specified-black-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147a89f13c059a0f1f900ef4f18e322c2dd43ce1233b0b963be734f5980dd064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70599 Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67247 Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70966 Malicious code in supporting-sapphire-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d43f3f3fb0d892fb17d9c1d2b876a2fa0bf69452857935624d8a2727b8b100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68348 Malicious code in fixed-amethyst-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f1bf92c3027d74632b1d1eb659fba82e6c3a8f815d9ee9262eab62a077219a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-rawon20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f09b7e183a0ee913a2a5b393f114cc27b630899ac828ad3f131c65c451aa78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-bakso83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff0a9fc0edd005757da8ce398931e8366003617410027011074ba78a59c7bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-klentik91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be74c8b77043ece4a6cc5f7ff4bfa00d62b8e82ea4cda5baf88d1ddcea819c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-lapis18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716ef652187e6bc1652336abfc876b966c00fd8ec70ef3659279c4a1a52c37ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pecel5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector addf7b73c6002486e8bd016ff0660533890553b31b1958801bf4babd59bf93f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-moci13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7afb2a2b8f39aac686b6f987547113c30add50657752d6a94ac2385d91231d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633678fb5daaed1fe91cd7e382930230598cf3cc80bb3c4c9c8db007e698c10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tek28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1665c5e930c27b5237d6d4a1b0b6a47470c99f489ade6a8b7701c575d0d7c898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-brengkes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a513e6c4f1dccbde7822bff3741fdead76fb71d0e5502e4905e57c48ea8a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79803ee32432a8c05c6c132bba4188810069307093094723aea66e437e82f037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lupis53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524a997c35c6193e9bb5223d87307d0f46f4e00a33c29a4f36f47abb83235085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8030dec5e9648079e27eadea18c9d97898b4f281c0129cfa2b9e03d727d57caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-botok37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25453110c6b1fe79eb7c2844a595a49b6889c15d486963da250797c0b5aff322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...