MAL-2025-145247 Malicious code in mysql-halley-loop-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297756a4de498d66e54f04ec547723dad2d3c41b72fe87b13eb6442aa05dba9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc193212bed6198df35f5621578795bb225e27e93d902cea7802975cf77b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139144 Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61943374ee28083fa6ec7a427f8625ca5e007b6c069eb21508d20dbe6f2b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139140 Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb-aqua-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e89b8c43616e16c5bbefacba13115d0ee832127f288a3f7663f97886c21ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly-salmon-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent-plum-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd3afcc2ff804bfa4ed47fd1487ca51e44b193c1716b4ec7a6c4c8253d31230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie-cyan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6acb4888c9f675f5b4c5b83fba44f370e8deccf1e1ae5f15ce0db00e99a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-yellow-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strategic-red-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673fe68728db301d208efbd0e2f3683905faae3d362deafc594bd22610c0b120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond-copper-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679bc3f0be0d096c7197b95397a01d24f75767f4a40dd4f33a5d2d564a929856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential-gold-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad2b907e7638c4cc960232fe1ba9d5b4991ef9f2e74f63b98debd0b8ef7f6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass-white-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9d58a2b13b2e04bef17537a288538813d12e8f9d2c4d3268608769849f2ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty-crimson-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262fe51f2f95a57ac51970166f9839c2b98e4ad24658a6b040c460cdc46fac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...