MAL-2025-68396 Malicious code in formidable-red-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64aca1c5f4d6f4b9000cc4868120ee799f2ff28512f8e514d98485b3442179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68579 Malicious code in grateful-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47864bbe42ee733de6fb4c2b9ad1ff3885f87fa2366d4d3fbf0b804bfbe4e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71024 Malicious code in sympathetic-ivory-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0410a155785bb0c8fe3d5b52615db7ac4aa03c24cb097a41a5a0697046c99e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69927 Malicious code in poor-violet-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbd919d4fbf6a7385c44246be3bf409d5b46e045e9a2b637634943b16d4f424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71052 Malicious code in tasty-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000a3b95f2339aa52cd421495c03f3fb88534c35ff71574a3955f0ff3632c32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67987 Malicious code in electrical-bronze-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a0dd581f821493fc661eca481c5265937b9fd0fc37d474dd4e626df56e6a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mie38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d2f15d5f04ee39265b3cc13a56df6c249db6fa9583c5db42de512a322e2b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klanting41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff7295725c955c61291c71eeecaafabda289d24cab4b68cc716f34d1a837665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujaksoto50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7b178ec9fcaa0cb37d93879468945c053e5831f90f86980eb9a7863b489947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6675a5b2da744cbd2f57678ee34c3463d7644c49c7c1e9b1be524940b95b3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-serimuka47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e899ab4a9ae7e7d2afd2f53b23f2f5a9aa75a79602d360f4db362bd4d5f69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lutis36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4f6c5b5ce2a266be17bb57210ac54df0916d978b82c3a3d500f759db1890aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lutis92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f567dd34d3b3229312849b64c0ea5347702c775ee2413daa563184dd84568920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58bf55d3be2c07b1c760eb867ea40868440946eec5bdb38ee380c2238fb094f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kembang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c173b242bcbae9b1285b47b1e030a49b95effa275b9be0eed88367cf6a5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rangi35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0b7be089b920f066e7db9285d6394f5559ad4103e0f73080b0889ad05aa6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1487dfb88ecacdb4725a09c501fb8b7c3f1f9bf9b49b773dfbb294b3471aee8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-martabak37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4051a0de68cf77c377329fd4dca4fcc4653f2f5a7793eb87d46247465b92e030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-nasisayur99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a652102268ec8d3c508f91e6638fab81bfbdf8912ac9ee3ffa7092ecb053bed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-tongseng92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b71a7b715bb03f41ee2bd0b0baebc905595353c044321f859f92e139aed98d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...