MAL-2025-138745 Malicious code in funny-bronze-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef9e82aae009594b04b907205f72f7f67bdd69d69937a6724d0c0b84ce246ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138686 Malicious code in electronic-indigo-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2314fd521ac8a50f510a66895297537a7f4a54a01b3766cf686a03b4bb10e31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138951 Malicious code in proud-crimson-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c1286ca9bcc2c22afa783d312250a4e270c79b9e27f81268ace3058bd40df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138897 Malicious code in nezzyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9a1ef9d9917a11a72dd9a08d959bbb0d0afd0e435ad0cefcf15631848696f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138616 Malicious code in cognitive-white-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b31ada0c29e36ab82145b814e1a1dd1cef13b83bfe78ebc8bd17b90b2007f53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special-blush-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f800e9862b5389aa723547d0578af4db51d0bbe834bd0e3b777dfb138d6384e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-peach-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe24b2835231bfd3416f10fe31d8f7cd24757aa57cbf7b9f891783e9b4f0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful-indigo-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073b7059a8d0026ccd0785079c933b238dfee08450669c873740d576b04c2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective-beige-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6aac03809a0c8ef6e792cf5f5195ca407ecaa8858f7fd86d1dae5151126355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138808 Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138828 Malicious code in late-white-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eb10c7af4c8cef448526af282d5089bb64071b81a7fe476c4f005710c560fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy-aquamarine-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2770327b4cddcfc3f0d28b8bc9d216c1b16feefdfd65922b461308fa69ff0ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological-brown-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ede7fac648eb907f0a40cee44c62a9eeed8211c5935f92f948cab14b107ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-chocolate-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a627c45b9b21cff9b80758c834e1de92978da4843201f45e2f092cf4d86227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old-bronze-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f992a7c167603557b99a2d242d25449585b6f3a6eefd7d368f60a93ed729c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-indigo-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde506781711f1d0eabcd1756ed03bfca3c64564adc7bb6e04744440292575ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-beige-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b5851dacf23aa7952819d3faba5c101e042512f09bd607d2e86d9502b15d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...