MAL-2025-112157 Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112233 Malicious code in rainy_mongoose_tan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ba6bf02850a23991134e64d4de8be27492afb976d1c1fd662836c424ca52bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112305 Malicious code in shy_skunk_lavender-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6c45e6253aa2521e1325c944b97b2697a370b54a6e2bca87e692e9631c712d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112013 Malicious code in independent_tortoise_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5ceffac9acf6acb1db2e19a0aca361ace0e7cb3d5afaa771a518a35868e4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112457 Malicious code in vulnerable_bandicoot_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a10f8f1b656f1828846b943c9e1b227ac381c4334e10cfa5d01885818bac1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111945 Malicious code in glamorous_dragon_lavender-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a766adec22d132f9f52574ef5fb475f1092eef40799c9f8bd0d96685071b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_parakeet_brown-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98565198e11e726621b7610dd4b2508f7cbe4a3d2408f8257d9f8b594a2fcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique_aardwolf_red-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b4987fd295f3a5fc04e7ee3f34babab8fcd030f8106bcb3db30477ed2d55e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_vole_salmon-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235197b512cb15fd1a881cbc3b143b2bc3d5c8f6cecb8df17b4d444ec5741e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_frog_rose-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0b4b9d299838b743d6526f4735a62c62b0d42c7c64ff71f5683b7f6117660c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_marsupial_peach-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5345325f6128790e22f5ad327f3bd612eeb346c4ec1c6e016066d2b5010a51ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decisive_tarantula_scarlet-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb969dffcb63e78d4d8413e9f5b0c7bd57cc76305026188a2258acf330ce88af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy_gorilla_blush-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baff912a9537343d75fcea89d3541e4b2fe5ab1286ade18cb3566638e6b20722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_roundworm_jade-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261eb4bd8cfa6fd2aaaf67b746a728ede948686666e71f8b3fc3db513e8b1c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112206 Malicious code in prior_haddock_turquoise-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdf3db229347b595f8581cf29c0ea772347f2a2169206f07c462cf1c9001c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_fox_white-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4579e3e8d697443cc962014f8e0abb27813f2527d49d139842ca049795c43bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112288 Malicious code in separate_leech_indigo-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d019b3e20ff49c0da1111a6f950d0e2d9fcd93ce655e53d69dd119e54aec68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...