MAL-2025-103274 Malicious code in gleaming_canid_aqua-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4253a6a1f87ab69701baeef64f200670501c784d87f3150e4bdc48c486ff6844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100605 Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106395 Malicious code in notable_swordfish_coral-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5544001be2a29a5176310fcc37f348d8e1ba8fcea6637b1b02885795986fef95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_kingfisher_crimson-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765180823addbc543c9407a566dd68d7e99ae2e4ddad01d8becf75684b2e01b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_lion_pink-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd09a0b2ba8945013f3acd25a891695c7a1f7832dc50a8a29b6fe5f745df1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103087 Malicious code in genetic_lizard_salmon-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438f67656376de01336024500f833edaf005d6e0788cef920ff2dca0d9edbdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99612 Malicious code in artificial_armadillo_green-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68c77953b0d780f8fbbbbc4279bad89a63bd07f4aba6a5532506c5debf0fac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110667 Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101241 Malicious code in decent_caribou_tan-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed4eaa62300ad006db892512d18c97559d7d866c9d3e1a29809bf0f992bf24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102295 Malicious code in evolutionary_felidae_orange-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bf4912daff75be009d406e7b5244fe4982a37935978f77bc19640e850c812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_quokka_lime-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb33264193285101976a8b802f5004a5adfb1ebb50c796cb150511b25ee068e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creative_boa_jade-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f27095f55d5f6879dcbebf5a717faafdbd92bcc4af9d257d94c6f113f4907b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_sole_purple-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22eadf7a1adf8d7167b9f2f589f0aba5890e6960943891077f2ebf1984953338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105753 Malicious code in mechanical_tortoise_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8beee9ecae73a75d8f251ab42615fa56c01e96bfa30e8d5d823c84493498220a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104733 Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102880 Malicious code in fortunate_harrier_orange-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474890c260bd4bdc1c2a7e91f892ec68d2c478d655829d9bd46f69075232199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106215 Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109812 Malicious code in tragic_locust_blush-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e39230f88a19e9c037775d8ae6dedc39fbe9bc71bd0c9cb04c052ab048b09fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100022 Malicious code in bloody_peacock_aquamarine-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12949e6e7f85fb88375584bd7ddaa4f335f1238ec4feb70e09c5ae01fa086463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef11fddb053d7f88c4c5a815c3dba2ad3a9dc4376140b4f2b34e14f91ae4cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...