MAL-2025-112479 Malicious code in xenial_worm_amethyst-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d814620e8ea30b37d6059bd57d57357234f0c1640f7c82340a6b00c1ee31652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112150 Malicious code in open_marten_brown-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f541c5bde2ac5f446dadbf6bba0062f6e7931fb80a784ebed56feaf29b1bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111665 Malicious code in apparent_owl_green-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940046ad11f82db072ee663d355feb9a47eb7ad25fcadcb2bbb53c1cab882d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111676 Malicious code in automatic_puma_red-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687227385f1b331d50c0cdbf26c9e95df4079e0b2f6ac21535439f0b98ce38ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112010 Malicious code in inclined_possum_salmon-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd467acc34f3caacae55a820c94ec51f73d72b684d7bf2cb990c23d3eb59e4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112082 Malicious code in mean_mammal_chocolate-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3889521ab35d1f129407772baf9f5c5f08b018c4df92db74ce86eb1e9bc84b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112128 Malicious code in neutral_hoverfly_maroon-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ffea684561b1537a15ce73edf95474868d8abc4c5439460f0f7988d18b8978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112290 Malicious code in severe_grouse_red-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc77a07c60b08d2620849bfcc5bfbd6df6e14cfbcf4e2c790a63e2e1aa8811a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112205 Malicious code in principal_thrush_sapphire-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655405b05ac150be99f792839edea2f3319ee2b4518dd4f99749dfe6f39abe45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111877 Malicious code in exciting_reindeer_maroon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20ba6a0945c706c17c8f760319cf405594d940c6375b9bf33b7a162c55747b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112177 Malicious code in past_guineafowl_fuchsia-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3a0ebd1bf11d29c6a38b9a837db2d9fdf3c7e2734bfa37dbe4dab3a7be3c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern_grouse-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0426f9e9086fd1eea960a1f9f1934e204e4df5b3485204322e75e5f51718e3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_loon-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb9909cea40f4d0d6ea3f9b2ef218fdb768bc00f41402f960a20abe73aa2ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_deer-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ef1df1d35118399cc158b32ccb5233cb74f1839d92e5d188c3c147dc324ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious_minnow-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a79b09efd8ae248af692d81fb67fb2e9f1f65d5ba88e94fa3e09dc6b917b67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_kiwi-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e623f105d13975749cc2c586eb88131144874d4ddb3d7d2c8292b65a8651cff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_gamefowl-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d6ef35f7c854744e777fcb0ddbfc25702fc2a4c65e062c1f85c649c8da01d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106408 Malicious code in nuclear_yak-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775e28f8f778f6cd0a4eb2a898ff46f7aa662bde4447b3b828f22723cfc8ef19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107866 Malicious code in religious_gull-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b53c3d712c97925dd3391b4103b63a9d4ead23749db5094baea1400ecb9ffc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100263 Malicious code in carbonara-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641ec0654a6c42e716ae44f1a73490a5a459527bb677799604b538e35dc6a6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...