MAL-2025-138739 Malicious code in full-beige-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4ed90522d6b1861df6a619715ef2cd213638a2fd3371105429e7af170f81fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138606 Malicious code in cheap-indigo-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97990c3dbd394d32a692511123a3cdffa4c9e1432225671b64623153e99226ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny-orange-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798765f26efb93ff4f1d23a03cb7fb342a0454a0f988b24750d8f121afd174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138597 Malicious code in brave-brown-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139014 Malicious code in small-aqua-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef45124ebfe627e5294f68bc4e9cb36806fe55be4c20289c8d2e2e1976c2311b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning-azure-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07ec1100f6eb32f14c5c0fdec643e19b93d67528e9d273fd5c864fcc847447b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca32dd51b46ba73c6074ac085243193562b7af07eca152a0375c42a229ab447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible-harlequin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00748c3d2042e9b9898bd60ffeca3a9aac108a888ce82ab243cb07f27cdeed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-sapphire-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f9cfb7c80950d2d8180a19016915d7d3a61f79c4b5e2f7508f69cb51fda23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-indigo-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea3439682e0e132103b64886a2e03a67d03fa0047485ab1d2a2d784ce5ccea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-fuchsia-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438d011ee38f73f0dd1f577ba1d9db6f206750b08c336e7de7afffdf837893a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81787b848631ca7c4d0d414f89470effa5b2e447901dbed6b4deb4181fcca223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-bakwan57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab53960831a72636cdf7b9c743f2af4dda860564d42befd89a790bc7789df324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gandul18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed0445693e4aee5cd5fe0b2917bb2f2164cbf85f5ea7d41fb91b75c36a87c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-klipo28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dad458c1dfb7cfc750b8ff7e7292e542172d4ee48ea7f5597df8a6489db274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-martabak38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e04003d86ed040cc9fda1c0620a53189d0fced83280675e8007974a34e5539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-miemee57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d385765de160c7ff097e89143f9856287ab75288a9992fe64968a9c617457e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-sroto20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb51a80219f8c5d4c8d17278b181c541747d8640136320610bba8788e636d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tahu80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cab9354f76ded953e150f896e21a0e53d838ed91ba8b1ede934f7b9aea13996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-ikan39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46be1511a5548df7a8f0bec3838ba4e72496e92e13d666eef2af9939aeb2eaff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...