MAL-2025-139158 Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138582 Malicious code in adverse-amethyst-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0185f3b42cf01537858dfd8c5af427b2d70c3bdf8b3567d40f3106e37fdb5037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138622 Malicious code in combative-crimson-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20d6db67477fcb5b1856681f899c65c487c208feab659f676f57c06e0c1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138585 Malicious code in agreeable-pink-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139098 Malicious code in very-bronze-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a26f5a63cdddbb9a5eb0e186b99713720a3399c3998db04cd9409bf6ea2521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-apricot-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e13b73ccb7939868638c754e96a2bab2251c389df73460c35f160206b58c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138771 Malicious code in helpful-indigo-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073b7059a8d0026ccd0785079c933b238dfee08450669c873740d576b04c2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e182291b34e471ae48a728d0704bd5af29203f6981b351e4ac27b368f2a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c128e238b9b9ee171998f65361af8c407c4bd90b004816c5dfd4a40a207f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-semur44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15929cb1b915818ba80d667585a71bfa3e4c7ca341eed02bba04c5c26d63588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kolak35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c088bcc21ccab06c768dc0e54e2ebb74a6d3ed5779e375375333e313a7517ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68053dd62bfecb8bd77976f4a95e523f012dd76d815d4cf125f969e1bc5d8222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mangut72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531616d95a17a4b623739f6c32ee3e6d0cb1fccff1d9f4ab3152eba4faf6094c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-papeda53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f66f888acfb21db9c6aad1e0ea5cd31e66ecd9d518a2314927541d469a26a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-menjes41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7c947ac5ba25a38bb702369ed41261c67bdaf92e841b5dd8ddc3a8cdbffc25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bed7823fb9b517b425027a57e2f0dcca1a7617958838024f88819fcbe6e50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bakwan80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6188a7e03c6629232c5c2eed06ac74247e8166254dc9a566d7e0bc18814e5edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...