MAL-2025-139033 Malicious code in spotless-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c01a2ba45f11193c6ab2f8a15a4a8f392c6e7ca344158808713a376df8e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138809 Malicious code in intensive-blush-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e8beb11a3148d321a00d6171dfb5dca236febffc4bf6b5b3b302be4dc5c44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139107 Malicious code in vulnerable-plum-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894703ee849bb67c5b9e8c54abe66797e0f3ee6b9e34ff534a946b2aa758ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138953 Malicious code in puny-orange-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798765f26efb93ff4f1d23a03cb7fb342a0454a0f988b24750d8f121afd174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky-jade-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d825ccdd3c586ccc3706373241373e64fa507325bd900cb7b20796f4805b4f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138859 Malicious code in mass-white-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9d58a2b13b2e04bef17537a288538813d12e8f9d2c4d3268608769849f2ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139048 Malicious code in strict-jade-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139050 Malicious code in strong-moccasin-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a34ce553cf0bf3eece09135faf465658a46b62b3f69b119f5f6cb95e749aaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138597 Malicious code in brave-brown-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138818 Malicious code in juicy-aquamarine-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2770327b4cddcfc3f0d28b8bc9d216c1b16feefdfd65922b461308fa69ff0ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-plum-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3d3322cd659440660ca27b138d537d5f1c9c36537a23fcb259c8eea296c058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ee12bc8df657031eda91ae45e9079c6d6bf6ddfffe84d7fedf523215f6281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-indigo-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea3439682e0e132103b64886a2e03a67d03fa0047485ab1d2a2d784ce5ccea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fded966376ff399dfe1c722516e6366d118b7022d1d25fc856574c52a7dc382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-salmon-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d7cf04aad6f2a06133f45d1220eae087ff54ae6af7741630bbfd49b116e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric-apricot-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e47e60b620642bcc95c5ac6199138001d0a1597bc928c020921b208827d026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-olive-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee55b0595e776f8d9225a44a4c603c623af94b0d72d54632ef8ada5a0b01ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened-green-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db59ba617bf579bbd2a0245f9e1b6ced1df533af2895fd80c5a6138c9976bbdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...