MAL-2025-112338 Malicious code in special_slug_orange-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b826c861c7d3b49ddac8ff853f6e5ab5ba46f4a5c9b2ef6e47e499b3a9d86e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112366 Malicious code in subtle_monkey_maroon-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9614bd5755d2f0e8c23fd4dd3887b01f620172d16ecfb895eb14266748f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111924 Malicious code in frightened_landfowl_black-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66151be2ae0d56b3952e36eeafc65ef19771c5b6ea91e6bfd3959031de0b7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112063 Malicious code in likely_fly_indigo-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174046672a2081952420f4047163df0f8bb00d2a46c5f056264f072d46a89e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_peafowl_gold-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d272fd1f7bf5c6e24f8d23cb0747715df449f0706f569fc8138013c213a34bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_herring_lavender-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82c7901f2ede1f8036fd33fea813cb9ec7abf0a4b790285d45efaa9f078bdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_sloth_fuchsia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c857f9fbe211695df074c58058ee9ac29e1360595331a85f75fb2887a8eba6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_whippet_bronze-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5f75e7257f9258c99387f5044e6144cc690e3970a02e26cff524a417408aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in potential_puffin_sapphire-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38ed2921a01265d9d808d4d16811a0f26725b9be8c291b74d17433c0807aab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_dove_turquoise-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6252d53e66cef20673a50bec8087c2d8ecb488d783a419c72377272e66df68d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_roadrunner_silver-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256b15c93429c614ce4cc53113f8cd50813bacd2e24a49906d4933bf727a39fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd_crawdad_azure-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34c4c31a1744768048408c5c8a7e609b1248217bf90b7b9ed05edaa4b5e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_bee_sapphire-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f658b25800eadf90b920958a64ee863a4b5d6a584fb033be800a5f6c28bcfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_wombat_azure-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccda0d0570821c42e70441865102dd497b70895ea6bcd0d3c6259ae3e9357946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_whippet_tomato-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5312a143a2874ce99bda8b40cc47890b3505c2412fb8a4496e6ad464495c4a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_quelea_amber-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acfed51da7f3ec2f23cc58ef944f5c6015193373663067323d62f4d77ff699c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in southern_cheetah_harlequin-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564b1cff2590ee033dd1704ed1efe01deb4cba220568f73a122339387afc2e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_mole_olive-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d510a0be73ad81da90253550669535f350be6c4e9d15fa83eace96c003a00380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_crab_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89b8b3f2737d61d6130e12e1e613fc144599f25a0e513be342e278776318dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...