MAL-2025-138915 Malicious code in opposite-sapphire-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194c6713bf51b1df163945ba00c5303080b05490fb1610399ceef7639e574369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139069 Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138971 Malicious code in regional-sapphire-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1274efa3a397d7d3d8049f187d3e3cf35df504c0cfa4c675dc6e3c84b086d7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139017 Malicious code in social-ivory-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4657d1a2ddb2cfa0424346680bc701aa074ca7ab6d0df7c4bffb602378373a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-copper-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c94d415e9762107a032bd4286a05d7948b45bbb787b79fcc62e39acd4a3ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleased-chocolate-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874f1b9f8cd09a7220d567788a1aaf7dcc14772d94267485dc88dd46f55a08c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c066ddb082d2d7537b82efb71416bae7232d508496aeeb6f936b7e2b9dec935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139111 Malicious code in well-coffee-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de84200bbd114ea645aecc77a354960effd3153ba8d61e9a14b6cb58b5d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138962 Malicious code in racial-black-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d484b1b3955d344c8437e7d180ac8f1e87c3e20ac5b3b5a2bc7d046da3ded104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature-tan-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe52aca37e341b7a047bff6faac671f1322143a6557fcc59de01fa3c4823b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-silver-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ade4f000a88f7793e87cbec263d8947264dc580e39547425a73883f88e9598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery-emerald-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138944 Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138672 Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138807 Malicious code in intense-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84096970a88e18d8cff9a02a706bd7d628ca36e75d7e49acc9105668f4611ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...