MAL-2025-112233 Malicious code in rainy_mongoose_tan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ba6bf02850a23991134e64d4de8be27492afb976d1c1fd662836c424ca52bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111821 Malicious code in distinctive_bonobo_green-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cca37629d6d3005eda704d9bb90ed1c6282d5b8c4c9e84d84dc7072d19a9fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112157 Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112013 Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112457 Malicious code in vulnerable_bandicoot_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a10f8f1b656f1828846b943c9e1b227ac381c4334e10cfa5d01885818bac1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112003 Malicious code in imaginative_impala_pink-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d40ddbe379c47bb0c4d67f42ca72d7c1b8620af6fc4b3eb744c338379310c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_frog_rose-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0b4b9d299838b743d6526f4735a62c62b0d42c7c64ff71f5683b7f6117660c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_parakeet_brown-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98565198e11e726621b7610dd4b2508f7cbe4a3d2408f8257d9f8b594a2fcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_fox_white-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4579e3e8d697443cc962014f8e0abb27813f2527d49d139842ca049795c43bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_roundworm_jade-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261eb4bd8cfa6fd2aaaf67b746a728ede948686666e71f8b3fc3db513e8b1c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_tarantula_scarlet-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb969dffcb63e78d4d8413e9f5b0c7bd57cc76305026188a2258acf330ce88af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_marsupial_peach-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5345325f6128790e22f5ad327f3bd612eeb346c4ec1c6e016066d2b5010a51ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_vole_salmon-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235197b512cb15fd1a881cbc3b143b2bc3d5c8f6cecb8df17b4d444ec5741e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique_aardwolf_red-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b4987fd295f3a5fc04e7ee3f34babab8fcd030f8106bcb3db30477ed2d55e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy_gorilla_blush-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baff912a9537343d75fcea89d3541e4b2fe5ab1286ade18cb3566638e6b20722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112484 Malicious code in yawning_dog_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51332ef3cefeb68bd246059184e1a9be6a35b74ae5b788fb38109370653098f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...