MAL-2025-146307 Malicious code in pm2-query-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e862fed99ae944003c9fc385a730be19c4484e4de753e2d75b84bfec326dc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145919 Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bc79bcb5a81f82f8ed7c71ef14f19bf018e96b359898de248338dc73e1d6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138697 Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative-lime-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0572147dd9d662ad4edc78ec7b74de29756babc7d0819322f02adb3227566f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined-black-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2705f85a0fcd905ce8ec3ebbe31f26515bd3c273b66f274be5b8879b3bfde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise-lime-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b505d68365aa0468e5dd6d13ddd91a058cea2f92664b66344bab4d240ccb57ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138910 Malicious code in only-blush-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c767df7194db3ea7350ec6d02b7d898f8ce91ae1822db3a02cd3186d086beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138799 Malicious code in incredible-cyan-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe01ec4fc7dd208e4229b84eb5590bc6e46631dc9d794f2d09949987fa726f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139108 Malicious code in weary-bronze-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eba78c701c91e88fce0d28506d839c47d359be22863e170d20f40a50262e76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139063 Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139114 Malicious code in wispy-tan-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3b7f1f26fa97657353304e4095669e56ca4d0f1b3a5b4bc17c831346d39240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-soto17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526af5b94544abb5a9d8059185f5130e30821eca5eb1af524554c7485e1e4bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-donat14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ea7869f41771db849d6c2cc4126eb88cc863ea07ad27154213acae041c7449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bc92e195d9a0da36a7439b75fa924797aa694143c960e2e6706b1077936c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-tapai26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d79fa6db5d24403855494449567bca6bdc4cec2ff8132392431c81eef92bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-papeda92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7295e52c76c7aeacd63574e1ac6326c67eccef6e28608457d8e84253912eab52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab54b4f00e6a4d52dceadc7b82e2af23dec561d8d07faad90e68fcd3681ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-getuk81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2378919903258341c219ae70006599e9c6c6d7f47ba91fa3480d9676f58bae80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...