MAL-2025-139139 Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f62e5f49571a9bcf03399533c3179b358e0738040bb42e0779678e2c4947c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139160 Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay-gold-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36b92ee3434c3de6879022767629df391dd87c32b8dd72b674ee0d6be6e58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive-blush-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e8beb11a3148d321a00d6171dfb5dca236febffc4bf6b5b3b302be4dc5c44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efcc0f1de88592b65577ec5b55c94906c912e7d33987c7e1317e84788125adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical-tan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce259aa8c0f820704c5dbc6c6e654b32f6f71b2975d0027a982606e68105814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smoggy-lime-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53897c4ff35fa4579e29ca086d5717918f25b29a030ccfab161c605dd9822911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138627 Malicious code in comprehensive-scarlet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d625dc8392046d7f079d2c9f470edf6e05d3884f821185549c04b7d8a46d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138617 Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138946 Malicious code in prominent-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c86b8cd91a495289e4841a1988fedced34e88bec52dd84e0987e332faa9f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138920 Malicious code in outside-blue-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b5cfef16a3260d810859a9327543f1696cf03d1066d3ee3749faae5c892d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138829 Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138684 Malicious code in electric-apricot-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e47e60b620642bcc95c5ac6199138001d0a1597bc928c020921b208827d026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca32dd51b46ba73c6074ac085243193562b7af07eca152a0375c42a229ab447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale-ivory-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0842ec1c31403be2c9b18ed3cf0c753346837220b3bb8da64b35ee217333cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-orange-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf2b1c7d4574027372c96a9437db17e6ef6312dbd95da41de26523fa4393250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...