MAL-2025-112467 Malicious code in welcome_piranha_crimson-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90c41a455bd7292276c3111f54d03b0845bf5b474528de992e464eafd732277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111685 Malicious code in bad_lobster_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21efefd45db9af7eddd4266ad0cd91490c86d0c3e7d4ac900419a890d8e0b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112401 Malicious code in top_gibbon_yellow-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301a47060fde5a72c39104ca3a725639e40e87b8613fde2d5efe8eba129d9e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111938 Malicious code in genuine_sailfish_silver-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58da342ac4b85b22c8f4795b981cf726e5988440e821a4c5cae590ec22848eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111681 Malicious code in awake_parakeet_moccasin-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb729a1f10c5598dff4ff091986534567d5d48a0451197519d034fa7c03caeb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112275 Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112375 Malicious code in sure_wren_copper-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a488b5e2b4e61352fe71635c52fe1cd4b721693acf76b4a9444174f0a8f24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111666 Malicious code in applicable_elk_bronze-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081c1300456f5a5e877496d6278cabb288d392fc1eccd8d30c2f9f57a387d8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111832 Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112178 Malicious code in patient_spoonbill_gray-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2045a997a570254736e4d4300a406ea048194ccdc2471b422d415778280a8bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112030 Malicious code in intensive_locust_peach-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d680769f9dbe45593f35f731a750d633016c96ab3d5a7eadab1a1353ca1bcad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112046 Malicious code in key_frog_salmon-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733e248168c21e062596b6724ecb65227ed6e4f26c6d6fbcd87b4cf8d218bf53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_mole_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a023b13ca7d40a8605711d8c5d30f7a251e3b646151dc324109c5b16e61b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_hippopotamus_violet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813a4190f464b6fdd93ef549da98a052f14f953ef917efd869085fe8ba4db6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_chinchilla_teal-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a26fa09e8ac59effa34b47aa13660739610f61ee10eff76692fa481d5adad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_elephant_fuchsia-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe7d5f846fbd69bb4d6291c01ce26c452b6a828915cb20faf3d1f63bfcb414c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_puffin_teal-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e99b117c161b3d87a830686b57fa70a24ec71028d1b4bc79011cf327c90174d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_peafowl_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e4126b1e75b649cac19edd21ba9c8b090ebb9c642480b227dffe19d4a3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_roundworm_tan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8d348927836b884137da548c6005e8acaf6d1ebec6c88f1195703fbd769a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_shrew_red-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9089ef7d25604d035d061a42ec826101f01030719ba2e40cff1c5a4dce90eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...