MAL-2025-112013 Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_kite_brown-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9818c6a2e7aaa381dd606721f3ab616826876825fedbf8090aeafe1993f2fb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom_fowl_blush-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0e2799a2dbc5d9c557e480074764e0953c04397fd4a2524c18909bb18f2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_haddock_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912c99a2e1178583d9cc62d4cb402c8ae09c59acff43a64d276396a2cca24a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_urial_coral-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d97dd0b1c370dd1acdc8d186df760ac8ca10878343fafbe91fff91098a93a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_salamander_green-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe031da532dc2b177e25cb30beb97756dd0e4be92fe80005b2f30146c562a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique_aardwolf_red-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b4987fd295f3a5fc04e7ee3f34babab8fcd030f8106bcb3db30477ed2d55e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_vole_salmon-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235197b512cb15fd1a881cbc3b143b2bc3d5c8f6cecb8df17b4d444ec5741e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy_gorilla_blush-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baff912a9537343d75fcea89d3541e4b2fe5ab1286ade18cb3566638e6b20722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_fox_white-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4579e3e8d697443cc962014f8e0abb27813f2527d49d139842ca049795c43bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_frog_rose-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0b4b9d299838b743d6526f4735a62c62b0d42c7c64ff71f5683b7f6117660c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_tarantula_scarlet-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb969dffcb63e78d4d8413e9f5b0c7bd57cc76305026188a2258acf330ce88af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_marsupial_peach-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5345325f6128790e22f5ad327f3bd612eeb346c4ec1c6e016066d2b5010a51ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_parakeet_brown-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98565198e11e726621b7610dd4b2508f7cbe4a3d2408f8257d9f8b594a2fcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_roundworm_jade-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261eb4bd8cfa6fd2aaaf67b746a728ede948686666e71f8b3fc3db513e8b1c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112257 Malicious code in respective_wildcat_silver-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c256ad5424549083847c3a06af1dad17121a78629c2048a2f61efae64b841bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111698 Malicious code in bored_cat_sapphire-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a50a7f2a2d053b0a5e324d6a1dd237ced8c662d4708b3aa1c9c424d12394e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...