MAL-2025-112442 Malicious code in various_coyote_sapphire-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29528afecd3de002466106f1a21b41a738aebd201cb5ed297434966c8ba662e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112039 Malicious code in itchy_lemur_copper-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d6dbb72f4f4a9fe624bfaaafaeb13c6af816f47a70fc938f9a27a5d12e4930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112423 Malicious code in unfortunate_sturgeon_salmon-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf2461d18f5f499793a95b8e611827669c2802f5310a6c1e67730503bde6abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111960 Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112250 Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_lark_crimson-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480b467444e81b1025486fa2cab9040661181ec7446c8f2881993075e33d2fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_sparrow_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b599412a0df4cbaab8dd4a2aeb0b7e37f0333f5aa6a329f960c5726d93fc42bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_flamingo_magenta-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8958bc46eb7a35cc67f195654cb2a6ada99cbbc4ae19ea250485cff220472e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_constrictor_rose-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97baf9f8bc7dc3d11d00ef20cc558abd7c98dfce66e298e783b12141dc9082af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_snail_maroon-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3e56af095f82489f9f327d5e234a74ecb05687f8ba20f173977d6a33593ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_aardwolf_tomato-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267be77a77518784fbeb67a57aeb2aa51861a7a74d0ec8a08f3bf655fc29e366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_chimpanzee_maroon-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f5171036f06448ab8ba9305199f07ed012f5a7037a6b3df03ca975aa793251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_warbler_red-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cae2f85607a599d6a3d495155bb189e0246ff853bff104be942300e41718d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111951 Malicious code in gothic_cobra_harlequin-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334bdd6149c3412a828de84354a9f9e111cfb06dcd82c8364d9cf2d1b05b63c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112009 Malicious code in improved_trout_turquoise-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592a7121839c91a75cde8d17fda76d8cf2ea965afd6fcbe42894c35bc286419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_haddock_harlequin-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81624cc61de0279de2a2e40826a7d59850a289bdcf7831e2a88517671b282c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...