MAL-2025-112432 Malicious code in unnecessary_wildcat_coral-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c851b0c9b4f399b7c3959b32879358a3fd992ee1ea08ef7912fbaff57ff9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112058 Malicious code in level_aardvark_black-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f88a9b1bc10b9b2b98519ed5474fb7285af97c05e95a2dbd8e320bee7c827e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111960 Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112028 Malicious code in intellectual_guan_harlequin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d894a2652def21c774ecc37f6e5d26727257402bc87d2da3f9edcc16c45e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_wildebeest_peach-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5692ce1cb6a0df9b829e12d271d475be53269e62c483fe5e225763da3a2ca95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_guineafowl_orange-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7252399e3c73bff2213d69c3523815fd5c297aaea95cf3a1616e2bbdc577da97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_mole_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a023b13ca7d40a8605711d8c5d30f7a251e3b646151dc324109c5b16e61b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112247 Malicious code in registered_turkey_rose-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e2e3e0ea54e220fee3c431fb4d26be007a01d5ce383b8904826e4531a2678a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112134 Malicious code in nosy_mouse_blush-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efd21dc1a9eba32754e5f1f3f626045dc9bf70e61c27ee1f734dec5795fb55f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112443 Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112383 Malicious code in tame_pinniped_ivory-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b3cf44c0283fbae1345353a9266a91199527545c9ba3a35e2e1469aa9f35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112363 Malicious code in stupid_hippopotamus_tan-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce76b3cf300cf6ad1fd9ada5fadd8f424bbca6cde1cd62dd0a053d543b66664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112012 Malicious code in independent_grasshopper_indigo-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f377fe45f92e0011861e8271a0d450b1aef5b27fe68b0bbca84102c12f96cf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111897 Malicious code in few_ox_fuchsia-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010b6b8e9da2794fbbf7c5ffb868eb93def9e759310026724bec71ca7a5aace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_hippopotamus_violet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813a4190f464b6fdd93ef549da98a052f14f953ef917efd869085fe8ba4db6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111637 Malicious code in academic_snail_maroon-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3e56af095f82489f9f327d5e234a74ecb05687f8ba20f173977d6a33593ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_tiger_blue-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd79244402cef83abf7c7b5d3635558d6b2fb3b096d1b8d9c559c9de6dd968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in likely_marmot_emerald-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494f797f4d6c9f4a0b40d5ea1095649aad3395e929016b3c5a6da0192b822741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...