MAL-2025-138905 Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138937 Malicious code in potential-salmon-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b710994e484177da233d848af8e1549c3b277f9d7efcf01c868add0e2abb1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138708 Malicious code in exuberant-moccasin-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766fefabea1ab75df7bd4779927413822d03cb9cbabead84d4a76ff3416a9831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138822 Malicious code in just-tomato-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b49b879957372f901c553ab6a20037d0354e055a1991bfb2a9d9646e228f340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138719 Malicious code in favourite-olive-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee55b0595e776f8d9225a44a4c603c623af94b0d72d54632ef8ada5a0b01ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ee12bc8df657031eda91ae45e9079c6d6bf6ddfffe84d7fedf523215f6281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-lavender-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be406abe776b818c911262390171900eec0aabd095ad292a6c06d14b14fcb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b64e4a56a725b2726b1b2ca6dbf6ccc1754bd55922937806bafbfc7344cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138594 Malicious code in bitter-black-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494d97992e9aa1a2e3c7100dcc8f3bcd7e30ae20be5d70edfdfbe8640456e928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138639 Malicious code in creepy-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fded966376ff399dfe1c722516e6366d118b7022d1d25fc856574c52a7dc382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-sego89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d8f4d3d6d2dfabee6deb35f93f0d442b3904e16331eb35f633022d99fbcece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-takokak77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a6d43ef329329b4fdd496cdd7b4c76f0d5d0a740d81a80538facdf50f79b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-dradag10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c616dc25b1f1758ac02b93c045aa887a59ff646e85667c6028ff28ec1487be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e487a93ed9f8afc5f3aeed2756322a253a7e0b340a5435f67890037e37784ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-menjes31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9f26cd94423d29bd623d60d73f479c4bd421a0f8f751b640316d97b9eab4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-kue6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccc085172c805f8ff14c79d7309dad10a096d225850ee922090102558cba3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lodeh11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93dc333cb9ffcfb95ca3f455020d380eb057cc3d7d8f008d4faa62dd37750879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...