MAL-2025-111954 Malicious code in gradual_pheasant_chocolate-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acb312d7eb93fedadf666dd74dca09a87c74d7ee6661da309a2f6d227ab343a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_elk_bronze-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081c1300456f5a5e877496d6278cabb288d392fc1eccd8d30c2f9f57a387d8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_crab_amethyst-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89b8b3f2737d61d6130e12e1e613fc144599f25a0e513be342e278776318dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_orangutan_magenta-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1816ff6513cd70043729c9fe4a2fe6610b19e1953af4f30c6532f196378e5447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_capybara_crimson-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f9024b7dc31552755750dc682027521915e6afc6f027bb82698631b26ffd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111633 Malicious code in @awee1233/tehkentel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035e2114a3dde01d8795651b3e1597681379bf8aa43663b64f15835057d0741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112099 Malicious code in minor_wombat_azure-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccda0d0570821c42e70441865102dd497b70895ea6bcd0d3c6259ae3e9357946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111888 Malicious code in familiar_chinchilla_cyan-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed7a71b94c8ccc4769c60492b5efa8b604948e0da8dcdd4148219b9acc85621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_anglerfish_amaranth-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f809104d1a00ff7403d1dd319017190b2097e4bfde99f2825c48964410b00e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112330 Malicious code in solid_carp_lime-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da42f5af0e0285226f83645cfc2b76d96417c409f52fffdcee2001dd3c44f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112423 Malicious code in unfortunate_sturgeon_salmon-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf2461d18f5f499793a95b8e611827669c2802f5310a6c1e67730503bde6abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112107 Malicious code in mobile_chinchilla_teal-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a26fa09e8ac59effa34b47aa13660739610f61ee10eff76692fa481d5adad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111668 Malicious code in artificial_fox_rose-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ead35ac063740db4eebd8115b36b350999a99a7969bea91c37e35784f07580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111946 Malicious code in glamorous_egret_rose-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ea354f306ea027187ee35ce2e3fb39bfdf3a14dd47cb685c6c49d00a695e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112432 Malicious code in unnecessary_wildcat_coral-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c851b0c9b4f399b7c3959b32879358a3fd992ee1ea08ef7912fbaff57ff9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111865 Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112260 Malicious code in retired_squirrel_amaranth-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce3580ae36049521695ef8ec4f04101785a02423072218f26e06555a3596059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_newt_beige-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b629ae67b7f95e41ec455677db62c6bb365ae62011885aa59ee6b0a4ac255db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...