MAL-2025-112448 Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112464 Malicious code in weary_caterpillar_gold-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41a6180a8d8829f7b6cdd414ed97b0ece36778d0c8addecaace7a3063ec6a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_cod_fuchsia-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400615dabde579335ba4490cfa410c47d970407d9ad7bfb878a14a19b37df938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_tarantula_lavender-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee29ff61dc16ad38cc6a060c3d1e2124d3b64f9913093282812e262acd36abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_goose_harlequin-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de41adbc77a4e5097c0a39fce8680a18e1342a584118f4d06e793bee6844b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_swallow_apricot-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825a6acf22bedec81872ee697d579e154c15d6e1943cd746994fbf1191087a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radical_flyingfish_sapphire-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62555a7e6e85bb064444ce00d81d189ff7d4a1d4e0cfd81b48d2d12d01b941f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111931 Malicious code in future_bear_emerald-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d19b01ac4a7bc7a0c6125414d65cd4d41183b120ce937e4da98ccced5b7a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112068 Malicious code in live_stork_moccasin-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6203ce39f2da7988fc0463ff1f70ecdb4377987363505fd20a03bef65bbb3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111722 Malicious code in chubby_crawdad_lavender-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4e9ed9025d185edc4c65cee50e7efba6b50f136a5da9e4bdc1686dd8c354f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_dove_turquoise-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6252d53e66cef20673a50bec8087c2d8ecb488d783a419c72377272e66df68d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_booby_amber-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a140dfadaf7317b17a96d30f037d7cebaecab2a85b9da7886da8a9499d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_aphid_rose-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2943c33b1f9a488d5217a7e8f8af846776e167df78a2adc0adb269b8182b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_felidae_aqua-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628492fd9c2f2bbd3ea376684e8b795be248bcdf7cb5724be2b78dcbab7f54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_pigeon_fuchsia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96271f3dc2683a0e062c9a0707d5c7ebb499a0456fbd073a9bdf1d71a6127856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111927 Malicious code in fun_trout_beige-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c02f9a282ac6d11791985abb05942198f2a3ce32c3e784d877a588637af2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112088 Malicious code in melodic_barracuda_plum-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6047f72b375e81be4cdb31a5057504b11105031527c0354087f439132d6cb8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111937 Malicious code in genuine_nightingale_rose-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c05ccfac411724ef8938d1e5d26073a7fa775c978eb11ec5f623d851529abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112486 Malicious code in yearning_amphibian_plum-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fae235cdc0ef2ff05114cf3f9f089b1cf6d3b80b515b638e112892b7e2e00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112412 Malicious code in unable_earthworm_scarlet-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4caca4757e101a805152979ff3660530f45be3978a677d8604025c9b12a430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...