MAL-2025-146707 Malicious code in proxima-backend-solis-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47debd0e472e359f6d7a9c6d07a2396dd62b9eed5f75d70e652ee1aa399ed61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141517 Malicious code in delphinus-gatsby-halley-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c6d86c6b07f4cea3e26a70cb2eda3a744d0607bf323cd9437ffb3745a10a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141243 Malicious code in cressida-sequelize-wolf-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a46a9c2846a091e28a3a4dc8c51bc71bdde5de64a5745a8b0b0b66988ee9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-salmon-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-maroon-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf1118128f7f95fa195586236283c5692f80b158e4907847a39edbd7299f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-blush-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e709e96bab986c44dadb6fb6c7de4e78675b81995e987bcd9dc3d6e00e22960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite-beige-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83a95118073e94dde2bca2edde4b80567741af45e29422d214d28a7bdec4fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond-copper-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679bc3f0be0d096c7197b95397a01d24f75767f4a40dd4f33a5d2d564a929856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty-crimson-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262fe51f2f95a57ac51970166f9839c2b98e4ad24658a6b040c460cdc46fac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138850 Malicious code in lucky-jade-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3b2f80727a3a3caaf9f28b39d2a202576ce7ca8599661f7ac4d7a69994ffd8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie-cyan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6acb4888c9f675f5b4c5b83fba44f370e8deccf1e1ae5f15ce0db00e99a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-sapphire-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b809653fcb23ebbfe1d0d721d1e3f83d29617509c15eae8357867cd86a484ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138740 Malicious code in full-purple-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5eb593083035279937e65ffa0004e5bf88a167663d04e81f13116891fef31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138966 Malicious code in realistic-cyan-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb1576f5761ab997e14ad1af27b249036af07e7678694417331933fee703313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138965 Malicious code in rare-scarlet-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c87e732e830729ce0653feafeddbad3950731e2838443473bbded48a0eec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139029 Malicious code in splendid-maroon-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229582b5999f79aa7d666c6749ae9c69842cbe99816541e3596a10f1c3da3e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138680 Malicious code in effective-rose-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e118a10f0c55599ccf3867367e6398ed8a5180b40ecf9cc833d04ba1d4f7d592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138652 Malicious code in depressed-ivory-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1e7864a89f16fcf083a51308091e24bac6e30d448f69727899487dcf508042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138926 Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...