MAL-2025-139158 Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-apricot-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e13b73ccb7939868638c754e96a2bab2251c389df73460c35f160206b58c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138582 Malicious code in adverse-amethyst-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0185f3b42cf01537858dfd8c5af427b2d70c3bdf8b3567d40f3106e37fdb5037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139098 Malicious code in very-bronze-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a26f5a63cdddbb9a5eb0e186b99713720a3399c3998db04cd9409bf6ea2521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138622 Malicious code in combative-crimson-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20d6db67477fcb5b1856681f899c65c487c208feab659f676f57c06e0c1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138771 Malicious code in helpful-indigo-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073b7059a8d0026ccd0785079c933b238dfee08450669c873740d576b04c2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138585 Malicious code in agreeable-pink-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9df1d2b10777f827e54b481ebb1e989a1ff922ddb6b63525d5169269a20ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-ketoprak86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c1c11deb6d256c3418aa029a94c2a7e615a05e965b8cd45dad67856bb9807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-tahu61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af9959c16b6d88d9ec498ed2ffc53efa96266fb6dbaf9a47196ca8ec1db027e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da662512703584192522551ffd13afb6f0b24598dc369dbc9e3fffe4c308468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bakwan80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6188a7e03c6629232c5c2eed06ac74247e8166254dc9a566d7e0bc18814e5edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-mendut11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fbcac09d2fedc6c0f4b461bdd6c19904cc106692e484e19c77dc0422192cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-teh11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ee1ce716501bdb4796be1c7f90e818b2d32349591710e6a0df88a32e9f35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11885641f818361bcdfce9b5bd7dcf6399cfdaa4ecf926bfdeeae3cd3a5fbdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-mangut85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382784539904c8e009c029481f5eac82020a04d0591f79fc6bcf60ec91fb7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-ruwet67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9214d22864002970292f0b0badbccac59d14485579ee607dfdd46703cc1f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...