MAL-2025-112120 Malicious code in naval_wallaby_peach-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a1434d6a4e915bba6742badc8751d9b74ae2cd87fa91847f589c6907e60f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111870 Malicious code in evil_sparrow_copper-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68208779ec28c576852ed96284dda40ddfd3d2f04e2ebe25270b1d0f9f4faa71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112217 Malicious code in protective_locust_silver-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1638207f21ca29344ad5ac86ca03096f68286dcc944e9bbf834d304966b5be73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112242 Malicious code in redundant_sheep_azure-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b943913fc09e154f06a91c1e356c349630f5e3f9d456f1136f8e885690ada3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112158 Malicious code in orthodox_coral_yellow-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6c552f53e5f1b7aa542a7adc1d0141dcf9dbae7af1b4e034a39fe97e58c376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112268 Malicious code in romantic_eel_gray-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d104b13e520d41e56c0dca70c7046802359f7646d19990e0364ac51f40f9623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112416 Malicious code in unchanged_herring_lavender-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82c7901f2ede1f8036fd33fea813cb9ec7abf0a4b790285d45efaa9f078bdd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111772 Malicious code in criminal_leech_purple-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed65384ba28970b6858f9224a3f227a51bff1646a2e1156b60ccd0edc3bb99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111836 Malicious code in early_lobster_tan-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53516b643e8449f3e5f6d1f4594bd7ab86315e543887db216e2aad2c4a2fafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112276 Malicious code in salty_bird_green-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5389ce8288c8905869388ae09c2e9989ac2cdc583fb0223c00e45d6d6ced5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111635 Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111771 Malicious code in creative_jellyfish_moccasin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ed1a7f891be3d4c8a31d10e896d2f23fe2a653681bf9e703178050c083b37a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111776 Malicious code in cultural_cattle_purple-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b171418a2b4b68948375d3501a72438991993d3ecf6e87bf80a980127f37ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_loon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d0b033497d43c8446f8a697d320e3c5bc596f1fc79dbf9c74d79ea1e7efed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aerith-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2d79ede5dc5fe4e4b5632fdc123c5bc657f5abd3a6f7e1adc53245280dd15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_stingray-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fa7aaf6587fea87e3d1e8e86cf6b5871db91e150685a8036134a882ee69ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_mammal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb395b296a2298b678c80bdc0d1ca9ae94575d09de7e0fb1432c73eae3af22bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_hawk-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47530d23e2e79968cf5010200de1731fd9ca032bfb2b872f52361853ebb80399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in seblakkuah23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386adc890e727a2b22ab432b06ce772b495bb19b761adef62895f077b601cd68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical_herring-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93822fc9e337542b2af4b6b95d3e65e7c1cccb4870d5d7c0fa5987fadb88f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...