MAL-2025-112387 Malicious code in tender_asp_coral-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d362b29c3a239e95f87dc0167aa15c70c94f4bc88dd2b30da299744a8e81f09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112375 Malicious code in sure_wren_copper-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a488b5e2b4e61352fe71635c52fe1cd4b721693acf76b4a9444174f0a8f24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111832 Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111838 Malicious code in easy_otter_salmon-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4a824fbb1b4912038f5f5e8879cebc8852a3e9aa1962304789521a63646e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111801 Malicious code in desirable_coyote_green-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab26356b5ddb5241a91961a3d803f0fc6cde498b444b3db7dd65be540c3342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112196 Malicious code in possible_bass_moccasin-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccb168a836db634f54e941d3752cc103240499dd5c37601eabf2c9d303f3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112163 Malicious code in outstanding_locust_jade-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c56b4a8bd83f10a9e8ed58a094f080e301fdedbaf8ffb10ed26087a35e900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_cardinal_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ad9292d76d78f6f94561907654f1dcbed93efad692693eb6602da7b66d3bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_whippet_bronze-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5f75e7257f9258c99387f5044e6144cc690e3970a02e26cff524a417408aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_gibbon_magenta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9ea38eb11354688ab7e9c4927515e57634feef2abefa62c12add5bd15173ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_crow_pink-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfab701ce34d98bb620d9d54877c35961131fd97559d213352575ac37257eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_fox_green-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52f64c51ff8462a46929f90a42934827224162e451bcd1717f2279ab3f3e843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_peafowl_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e4126b1e75b649cac19edd21ba9c8b090ebb9c642480b227dffe19d4a3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_swordtail_green-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d7c157699bd59b73f51e319dd87b4f6cec12d26bb554e9e2d37f474e0375db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_landfowl_lavender-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a876f62755a44017f9c2d25c82ec04d0927b01ad9b22c6f7d2c32396804db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_heron_azure-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5227543fd581a3c36d3fcd61a4859f4d00ad5b0e8aaa68a760cc3e6a127d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111753 Malicious code in conservative_egret_silver-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7956b8b674dd6c74908e4c3f96af454b34a8a8af887091f7fc5337bc1d736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...