MAL-2025-139002 Malicious code in shaky-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937baec00ac8f0904a27fcc57288a2842d8ae07618857a3812c607570368d851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139065 Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-violet-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984f8caa09db308e151dab9a1dd0b63764b9ac82af2a57e342093beb89f32aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensible-lime-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3106c4a618770a4e3fbb05ded211c1acc2bf67e5e8126b0abe185843b87f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tharkunad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4cd45f426ebc0adc00027e3cad2b3ec913517f82ba22215ed47354d7c1a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5352403d2c82ea93e9612c7592d466b84ba466cd6f4bc1dadbc563994fead63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common-coffee-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b157514f38c2a35cba6eb0fc85f30d7036b5c41460581d6a69c128bd0b25baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-amber-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3777e6fdc1b4b372b8acf2210560d06c2431a200391f6c4512d754ff09902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138957 Malicious code in pyonga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89509b102cedd27f8218e09a3d8eed64cd86ca9a485d41d9c8eb426dd82e179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138708 Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138703 Malicious code in existing-cyan-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1633ea59d481983ee376978a6a2a319ef27e6a0879ca09fe7a81cb5c45902ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138736 Malicious code in frequent-crimson-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a6facfca29c6ac2a7ed67fb8d73c51fdddc074c47b5253fe74da6a1e16fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-salmon-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42648f11db276a954142308546267284bec5c46fed58fc79193a30dae30dcbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very-bronze-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a26f5a63cdddbb9a5eb0e186b99713720a3399c3998db04cd9409bf6ea2521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138816 Malicious code in isolated-silver-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf3579bf50d1c12a6fa36e149c314108aba643f652b64a8de0ac59cf18e589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139093 Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ecad02485b861256089aba04761917a9d0f3668f5f8bbd80a93a80e38e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...