MAL-2025-111753 Malicious code in conservative_egret_silver-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d7956b8b674dd6c74908e4c3f96af454b34a8a8af887091f7fc5337bc1d736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112331 Malicious code in sorry_buzzard_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab8442ed09033ce6ad2c2cab451d7c3a89c72859abd38615db3884d82be2e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112106 Malicious code in moaning_sheep_apricot-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affe2530801e4064117dfb717c6246f7573a64aac7751f2613dd642c387cea5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112125 Malicious code in nervous_koala_peach-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7a2306522f18c1a15d054bb3f44ea78a725748b3a4b9fdae7bc61e33ff781f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112392 Malicious code in testy_roundworm_tan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8d348927836b884137da548c6005e8acaf6d1ebec6c88f1195703fbd769a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_swordfish_gold-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9f1f9e843dda8cf1267324b29ada6688db5fcf5451d9dc6b67ad49218122b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious_mandrill_violet-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef76c2b6fe749f2f44912819f4f6f5e87e78e342a901b7e15b894a765e8845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_monkey_maroon-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9614bd5755d2f0e8c23fd4dd3887b01f620172d16ecfb895eb14266748f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_pike_white-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff110377eee0100498a1da8413d51c66a010207411affee6217abccaff414a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_hornet_aquamarine-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae6fbc4abc2f98dc43fef4a51e06c962531d1a98d38dff2daf88fc9f3d7110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_sawfish_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146925d01ceb9c7866c0d8583ba28de71917c40669bb29b6a65ef23c60d16d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112180 Malicious code in peculiar_crocodile_scarlet-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eae2b9c144861654df04ecbcbe1fc6191721c7ff9ce0c8f8de00a9698a24a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_booby_plum-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f320c5116ec806f0bbc4e09babfb70df887a75f38e3205b0113316cfee15ceb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_albatross_amaranth-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ae66e441a2dac2479b6054d6df2a6a14ac11b0da13bb51a1f82065e4404284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_ant_peach-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd87681afc7349d38ccd0d132cc977c3740b158366c1cc4b465f1d468830ccc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_takin_aquamarine-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f63e32b0dcdd828067761c5d2fdb017777782b5a9623eca9c2bfde487819f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_jay_chocolate-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49be4ee470e9c591ccd14db42661c1b04cb948827980ef3a82b3da3473d2f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...