MAL-2025-138784 Malicious code in horrible-sapphire-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee24576f1bd378fcb99cdaa68b77c1ae8e426d0ea3c2eaf522a8c786f18258ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139114 Malicious code in wispy-tan-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3b7f1f26fa97657353304e4095669e56ca4d0f1b3a5b4bc17c831346d39240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138617 Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138662 Malicious code in diverse-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ee28df6210a54b22e0979313c1d2f14b129bbd0701896678ec226afc180bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138899 Malicious code in noble-purple-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888440aeb44cd76b86bab7082dbf1d12779111bf967e4213c05c038457c11be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138680 Malicious code in effective-rose-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e118a10f0c55599ccf3867367e6398ed8a5180b40ecf9cc833d04ba1d4f7d592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138684 Malicious code in electric-apricot-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e47e60b620642bcc95c5ac6199138001d0a1597bc928c020921b208827d026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138898 Malicious code in nice-silver-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ade4f000a88f7793e87cbec263d8947264dc580e39547425a73883f88e9598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138775 Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f5cab03121ae6bef2a8c9771efbd4029a1e16889169269316a450f9f843aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-plum-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894703ee849bb67c5b9e8c54abe66797e0f3ee6b9e34ff534a946b2aa758ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138987 Malicious code in royal-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh-salmon-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d9478520688cc69a37b3a1c65d4666100b03cc43bd663bc1b7de2ba243c76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-amber-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde371e43a8f2ccbd1a4118ee43bd258b0dbf755eb6afca4aaf022ec2d5deffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-chocolate-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affad2ea430b599ebc9f12c09bf19750aea23a847aed5bef05f12b919348f6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138915 Malicious code in opposite-sapphire-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194c6713bf51b1df163945ba00c5303080b05490fb1610399ceef7639e574369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...