MAL-2025-138987 Malicious code in royal-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139028 Malicious code in spectacular-azure-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb1e1fbbba7f878cd50573fb7c22a15023dbf7a797b0c9ace9fbd7500a1e8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138915 Malicious code in opposite-sapphire-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 194c6713bf51b1df163945ba00c5303080b05490fb1610399ceef7639e574369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139069 Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-copper-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c94d415e9762107a032bd4286a05d7948b45bbb787b79fcc62e39acd4a3ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature-tan-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe52aca37e341b7a047bff6faac671f1322143a6557fcc59de01fa3c4823b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139111 Malicious code in well-coffee-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de84200bbd114ea645aecc77a354960effd3153ba8d61e9a14b6cb58b5d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138785 Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138944 Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing-cyan-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1633ea59d481983ee376978a6a2a319ef27e6a0879ca09fe7a81cb5c45902ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-silver-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ade4f000a88f7793e87cbec263d8947264dc580e39547425a73883f88e9598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery-emerald-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleased-chocolate-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874f1b9f8cd09a7220d567788a1aaf7dcc14772d94267485dc88dd46f55a08c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c066ddb082d2d7537b82efb71416bae7232d508496aeeb6f936b7e2b9dec935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138807 Malicious code in intense-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84096970a88e18d8cff9a02a706bd7d628ca36e75d7e49acc9105668f4611ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138962 Malicious code in racial-black-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d484b1b3955d344c8437e7d180ac8f1e87c3e20ac5b3b5a2bc7d046da3ded104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...