MAL-2025-111976 Malicious code in hilarious_rook_moccasin-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e50911eb79ed1b70c5b5001a6996d2f023558e383e3482d819f0c4d3c62dbbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111962 Malicious code in handsome_mandrill_ivory-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420d23b3e684607e6cd4ea18ab1ccdedfe400f5564e2ce9e01aa1db38804127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111689 Malicious code in balanced_zebra_turquoise-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7afd9cd69208f6ad3925a63a3dfa39b73a4b0977fed185848faf95cb66428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112083 Malicious code in meaningful_buzzard_orange-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70063e50477090c5226ebb8bca00422e03e1143ae7048da1215d7965e918c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112153 Malicious code in optimistic_shrew_magenta-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb3a59290c22d8fe0e3cb8e995be532f270e5dcc7077e2e49c0223a2f011f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111751 Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112470 Malicious code in whole_vicuna_lime-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de51267b4f17015bd7858dabbb89b3293ecc43a60c160f43a1a6a0b1d2752bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111914 Malicious code in following_worm_aquamarine-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16261f0ee471a3bd1732609e5b854661a46a60253ea8d0687ebd9ddb2181ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_wolverine_amaranth-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930e5a5905ea4c5f0146c3cc6a7e098b6a573878ad4e0bb0a91242956b2f44cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_silkworm_azure-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e88d6d2ffad0efecd35bd1facca4c7dfb61eba297b687dbf9c3687cc54856ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_stingray_lavender-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d72c86e2933b22bd946eb0465eb4273cc9370c78c6ddea762d7edf0a4ac39ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pure_ladybug_tomato-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb625c693f8fd140cab4c69268c318bf5370ac100e01ecf37823aba8f950e0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless_constrictor_orange-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d6323cbc26b7234fc707f39e38ed7c8b211e6e64f11d1f90f1b9be240ecdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_mole_orange-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de820c84c741208c063d8f282152b1d2ba0288bb8bd0749bbd4dde28cf6bb45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_duck_emerald-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164104435097e9664489e7b27534d7c8b900e9f12246944dea802170c5097dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111754 Malicious code in conservative_guineafowl_brown-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885f317b187c00d027efe4e7d2a72e092f8a5a8d246552a2eaea141d1be02066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112212 Malicious code in prominent_cow_indigo-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f0cf78783b715e5de19fef0b2645bd729576376d1bb7038f33397a9de66a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112423 Malicious code in unfortunate_sturgeon_salmon-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf2461d18f5f499793a95b8e611827669c2802f5310a6c1e67730503bde6abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112039 Malicious code in itchy_lemur_copper-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d6dbb72f4f4a9fe624bfaaafaeb13c6af816f47a70fc938f9a27a5d12e4930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive_bonobo_green-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cca37629d6d3005eda704d9bb90ed1c6282d5b8c4c9e84d84dc7072d19a9fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...