MAL-2025-139058 Malicious code in surrounding-plum-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5902a9b7554786612aecb5e4427670d316d9ec3193d84b1316cb54f8b9782d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139045 Malicious code in straight-maroon-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c6f60bd1be514764aea67ad6dbcb85bc59aece88d94c8415e0ed359100ccae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138999 Malicious code in sensible-lime-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3106c4a618770a4e3fbb05ded211c1acc2bf67e5e8126b0abe185843b87f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138935 Malicious code in pleased-chocolate-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874f1b9f8cd09a7220d567788a1aaf7dcc14772d94267485dc88dd46f55a08c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139004 Malicious code in sheer-apricot-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c223e8b64edca33cca40bf70ced987c14eb549322d8a5fc3e01d44c5eff6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138608 Malicious code in chemical-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843e469f42d82876902aa71724ad51d64fbf66e28c4d288a53478f1fd1746313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae4df8a9f707910bba3600a9c4c168073fe696781efd8629e71a5a19e63c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-moccasin-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b875d9a8130ba607af18ec9bdf3754378f955bb12c67541bb0d17703097adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous-sapphire-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6869967895ce9ad4d553e75822f46f21ebfc6bcd39faa126ddb0d2eaaac832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-chocolate-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df767f4c41ac852c8a914c950c465822ae421c0dd34d5e87fe8649ecb5aedb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-coral-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bd82b3629a0b84b5e83f10a271821958279c419583ffcaeea63638198a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped-crimson-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6958348d2e05f511c65da6531babfbfdfc8f5799f38521d39d65710a18f3b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy-tan-salamander (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b02340b5f5a18bb4e997b746207911386488b2d4c1eec42155d7a954bcca06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-pink-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest-lime-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95261d4a1333a38b39c936f972a46ef6c05fa1cb0c1bfe38a9843216b59d55aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139084 Malicious code in ugliest-gray-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af217675d927f4ce3a7993c6e91bbca17dd3eaf15fac16022b4c64148ed19a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138950 Malicious code in protestant-jade-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2bc1fe0efb377fe5fc0af8141ff8658b9d9ff3a6bb2392dc1f008206ae9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139010 Malicious code in simple-black-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc2e3e466c78a86d849f13312075a9fadc643e176fed9c81189a19988706aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138778 Malicious code in holy-jade-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c47c0ca2346477b37e0b518eb31e4fd3433d446c2baecf2f93911206db0451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...