MAL-2025-68395 Malicious code in formidable-jade-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80af9c5c6a7e7189435cadbb92cb73d26676e257c873dd4700593b0ba02d8f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful-fuchsia-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a443dec52dd06a5ced591c78c440e4846f79305ac6c4feef5afebffd038ba8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational-aqua-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b618557eb29f4ff29d11d32b9388398df1b9fc1a54c4d62483b457cc37273c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68115 Malicious code in everyday-silver-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabca3d24ef9893dd9ac2ebe28868486b3b7034b53f67af1a41400f4c3cd859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69123 Malicious code in level-sapphire-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60edc243937646681faa70ffce2fc76d2b55de51cf4d0beb4bf24586a67f9650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect-aqua-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d98bfd6fa87fa82c8fd3ecd24f28c9c5d0b9d495129e869cfdfd7b5a4063ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-amaranth-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3396fd3ffe19aa6c82a1a5ba838258a2a165323f8dda83442db57f16617b3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67408 Malicious code in confident-white-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f867d5a6339e4f4dbbd461149845bfe3b916feb19999ccf63bf1e16a2962b0e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70212 Malicious code in ready-black-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd39e7f5f789a06c216bfd7dafa2b7223ab71218d62b05c0502f7a6072d9878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-lupis51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc82b2ff024bf5e8ba7743638b35b034d5fcdb6b00acfdb663b98868a4b6869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-bakwan80-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b53e691fc4e7e4579184cdb571eea248649c9616854f76ef018eb20f0f51b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gulai3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80664b16cbca3ce2298aca5928bba35a7ab07e8381f509bb70638e20c315cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63934 Malicious code in kurniawan-nasi51-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66fbff97aa339942bb647f10640b7bf89cf95284ffa5f9cb8339542c7bf48737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-empal62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc9aa72ef84ed2d4a005e36e847243bcd241aab613489686e38cdf6ab6e0346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb6ca7a5f7c80e1311d5c1a8d0cd4d77145096754b6621a06c4b9783326fd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-bubursumsum30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e39915b7cb4e4036150f6f08911abc400a8281037c6fef70f979ff08185c5a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5cc6458f64a371d4eea00c4991abaa2bf4d73826c4a5477c70310242b7f5cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-nasisayur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd591e872eeff7ba23aa00900d931efe2899b628c5882e00d1bf4e5091e6f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61829 Malicious code in agus-ongol-ongol73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d6b163d525d0bc6f7db5f3ce59cc2119b059f04f1eb569d4f235f57667c763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65264 Malicious code in scared_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08becca8e8a964b14e00464d2f10bf4fef918b97a0837c136f5de013d8a80062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...