MAL-2025-112244 Malicious code in registered_bird_azure-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19699eef85adcd144b005cd40682140e84828923c2fcd975edc1896ade25ee45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111749 Malicious code in confident_canidae_magenta-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf609063cfd80e1929dd473c7d620b7864701ab81e06f20f0b65b08c9683576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_bird_azure-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19699eef85adcd144b005cd40682140e84828923c2fcd975edc1896ade25ee45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_coral_fuchsia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb09c5114ba6c6bc04ea183f26c7bd0821a5369bee8ee0b27f92f4791b29f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_heron_pink-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c2c3c9721c9a8bdfb984e7733471ed094a109b92d3ed7495426eb9a3d3ba75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shiny_quokka_blush-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba80562c5187a0cb881d201884188fc0fa7073dd56e3fb872701acee56d6924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_chicken_violet-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe8a687dfc486e523cfd66eb4f0ea4fbf0213c285de8b3fbe2cff81fed91d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_tick_yellow-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1cfe0cba432a144cd73f2a359521e46a3136dc4a5b4815ee44f2c14ae8150c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_condor_cyan-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df65015eb0ad73ea416c905871fefcc0cfaf3e5ce210669b60084744f3b16c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_nightingale_rose-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c05ccfac411724ef8938d1e5d26073a7fa775c978eb11ec5f623d851529abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111871 Malicious code in evolutionary_mole_orange-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de820c84c741208c063d8f282152b1d2ba0288bb8bd0749bbd4dde28cf6bb45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112422 Malicious code in unexpected_hornet_aquamarine-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae6fbc4abc2f98dc43fef4a51e06c962531d1a98d38dff2daf88fc9f3d7110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112352 Malicious code in stale_squid_turquoise-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f119852ca3d901b668849fbca6c2ced5569de5584cb4a8c03ec763b2a25feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_mite_aqua-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185433554a44e8b08af8cd172e3af0b0cb7a7dc5e2172a05144f88c5cf0b133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_jay_magenta-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4a92874405d42f21b8794a02bb72dd028bedd10c6f44dbb3db4f53dbf5ce14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in filthy_seahorse_salmon-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4530d54d6837007ccb7c2c1ac72d623494982094f4341b39e34947d71fb67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112269 Malicious code in rude_canid_rose-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50918cfa811ee24eec76c2418fb447860162ab37c2ad2f13c2d294466d6b40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112481 Malicious code in xerothermic_toucan_amaranth-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b574a307ea432a2cacd013af1fbf0af6701e92012dd8fa0f5a6df71381e5a98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112268 Malicious code in romantic_eel_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d104b13e520d41e56c0dca70c7046802359f7646d19990e0364ac51f40f9623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112278 Malicious code in scrawny_rattlesnake_amber-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ea580f5c026d11df000389b68e75526948f678a01cdabf28c7bb0feb853236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...