MAL-2025-112163 Malicious code in outstanding_locust_jade-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c56b4a8bd83f10a9e8ed58a094f080e301fdedbaf8ffb10ed26087a35e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112093 Malicious code in mighty_bobcat_turquoise-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917939580d28c2e1d7947440da679be659a28eb63e2882d26bbe9ed3c63f8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112234 Malicious code in random_stingray_lavender-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d72c86e2933b22bd946eb0465eb4273cc9370c78c6ddea762d7edf0a4ac39ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112275 Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111712 Malicious code in causal_macaw_aqua-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf5f5a540997a91e68dac4c230af6980f973330fbfd8b294d2fee37dd6a4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111787 Malicious code in dark_quail_apricot-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0309e6febce7225fd52559c5db9311a3f2e381127af9b7d036dc9a8a4cb4607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_warbler_scarlet-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8627c9e52b969ce498d00b9f3bcac65921a4f5f91f9017c41c66ecc1107a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_urial_coral-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d97dd0b1c370dd1acdc8d186df760ac8ca10878343fafbe91fff91098a93a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_salamander_green-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe031da532dc2b177e25cb30beb97756dd0e4be92fe80005b2f30146c562a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_haddock_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912c99a2e1178583d9cc62d4cb402c8ae09c59acff43a64d276396a2cca24a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom_fowl_blush-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0e2799a2dbc5d9c557e480074764e0953c04397fd4a2524c18909bb18f2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_carp_lime-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da42f5af0e0285226f83645cfc2b76d96417c409f52fffdcee2001dd3c44f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_kite_brown-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9818c6a2e7aaa381dd606721f3ab616826876825fedbf8090aeafe1993f2fb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_heron_azure-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5227543fd581a3c36d3fcd61a4859f4d00ad5b0e8aaa68a760cc3e6a127d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112457 Malicious code in vulnerable_bandicoot_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a10f8f1b656f1828846b943c9e1b227ac381c4334e10cfa5d01885818bac1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112013 Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...