MAL-2025-139009 Malicious code in similar-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ddc03246640b57d08834137a34dfcab466c5b1c042f58ac75c4974e0fc114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138775 Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138783 Malicious code in horrible-moccasin-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b875d9a8130ba607af18ec9bdf3754378f955bb12c67541bb0d17703097adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138680 Malicious code in effective-rose-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e118a10f0c55599ccf3867367e6398ed8a5180b40ecf9cc833d04ba1d4f7d592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138629 Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138662 Malicious code in diverse-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ee28df6210a54b22e0979313c1d2f14b129bbd0701896678ec226afc180bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138858 Malicious code in mass-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39323fc49189bdc215d3a69c5d427e192d7c99984ebec3c5fb5d146e6cf91de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138784 Malicious code in horrible-sapphire-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee24576f1bd378fcb99cdaa68b77c1ae8e426d0ea3c2eaf522a8c786f18258ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-amber-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde371e43a8f2ccbd1a4118ee43bd258b0dbf755eb6afca4aaf022ec2d5deffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-chocolate-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affad2ea430b599ebc9f12c09bf19750aea23a847aed5bef05f12b919348f6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh-salmon-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d9478520688cc69a37b3a1c65d4666100b03cc43bd663bc1b7de2ba243c76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-plum-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894703ee849bb67c5b9e8c54abe66797e0f3ee6b9e34ff534a946b2aa758ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-sapphire-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f9cfb7c80950d2d8180a19016915d7d3a61f79c4b5e2f7508f69cb51fda23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139028 Malicious code in spectacular-azure-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb1e1fbbba7f878cd50573fb7c22a15023dbf7a797b0c9ace9fbd7500a1e8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f5cab03121ae6bef2a8c9771efbd4029a1e16889169269316a450f9f843aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...