MAL-2025-138919 Malicious code in other-plum-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f22d4dfabd1b17b29347535e2202b029bac2ea771ee985aa606bb72b249154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138847 Malicious code in lost-harlequin-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7989762ec21dfa2a958941262252ca2b6010832a7f95011405e871072ad67bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permanent-sapphire-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ddc03246640b57d08834137a34dfcab466c5b1c042f58ac75c4974e0fc114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-amber-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3777e6fdc1b4b372b8acf2210560d06c2431a200391f6c4512d754ff09902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-amber-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e30befce3cb5ace85b22d15ae5039ff8679def961ca8e9634b0948bd7a1bf25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tharkunad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4cd45f426ebc0adc00027e3cad2b3ec913517f82ba22215ed47354d7c1a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large-coffee-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa5cebbaa15376d7b8cea48402707727ea90fca9708543ccbe9e4b3c87c979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean-salmon-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19747e08beef00c0ff50ae824663ccc2a186e08cef376c9a8b33a9708d7b2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138793 Malicious code in impossible-aquamarine-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986da177a3fb6e4cf6279a045c7ddd48d4d2487ed554f3de7722576181baf393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138736 Malicious code in frequent-crimson-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a6facfca29c6ac2a7ed67fb8d73c51fdddc074c47b5253fe74da6a1e16fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138860 Malicious code in massive-yellow-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138977 Malicious code in respectable-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3312d32f163bef50e05007aec5377a88a01c8ed46223f17c2acae757eebf0295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139074 Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138737 Malicious code in fresh-salmon-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d9478520688cc69a37b3a1c65d4666100b03cc43bd663bc1b7de2ba243c76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138871 Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139119 Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...