MAL-2025-112442 Malicious code in various_coyote_sapphire-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29528afecd3de002466106f1a21b41a738aebd201cb5ed297434966c8ba662e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112250 Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112143 Malicious code in occupational_bat_maroon-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738d7d53021056060e6a312ec3c7cf3faacee1e891ba10b2c59d94e49e747b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112432 Malicious code in unnecessary_wildcat_coral-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c851b0c9b4f399b7c3959b32879358a3fd992ee1ea08ef7912fbaff57ff9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111960 Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_sparrow_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b599412a0df4cbaab8dd4a2aeb0b7e37f0333f5aa6a329f960c5726d93fc42bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_chimpanzee_maroon-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f5171036f06448ab8ba9305199f07ed012f5a7037a6b3df03ca975aa793251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_lark_crimson-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480b467444e81b1025486fa2cab9040661181ec7446c8f2881993075e33d2fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_snail_maroon-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3e56af095f82489f9f327d5e234a74ecb05687f8ba20f173977d6a33593ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_flamingo_magenta-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8958bc46eb7a35cc67f195654cb2a6ada99cbbc4ae19ea250485cff220472e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_constrictor_rose-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97baf9f8bc7dc3d11d00ef20cc558abd7c98dfce66e298e783b12141dc9082af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_haddock_harlequin-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81624cc61de0279de2a2e40826a7d59850a289bdcf7831e2a88517671b282c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_warbler_red-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cae2f85607a599d6a3d495155bb189e0246ff853bff104be942300e41718d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_aardwolf_tomato-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267be77a77518784fbeb67a57aeb2aa51861a7a74d0ec8a08f3bf655fc29e366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111995 Malicious code in hushed_smelt_red-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afccc17c74ce3b8dd886b3d9c21d1c8fec8176f82d892cef241229bfd7d80644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112419 Malicious code in unchanged_tiglon_emerald-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81c580c49249e2af6f3b24ecfe3bd0a32cf75b78b373417b418bf8c4ed6ef73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...