MAL-2025-138691 Malicious code in equal-scarlet-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138740 Malicious code in full-purple-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5eb593083035279937e65ffa0004e5bf88a167663d04e81f13116891fef31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139120 Malicious code in xenophobic-moccasin-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72783409ade8f2c008916761c5f967a7b2d5dff5ff9eb27165d239248fe0ca26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138733 Malicious code in forward-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda4ab6b7f5634651a53d011f38d48135f98262fb93d7c8ca5fa323c1c33905a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138994 Malicious code in scornful-lime-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34414b15538fbb33304a63a783bf9b4bdb074b3309d03ff4a3776077a3f5758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139116 Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138938 Malicious code in precise-lime-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b505d68365aa0468e5dd6d13ddd91a058cea2f92664b66344bab4d240ccb57ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138698 Malicious code in evolutionary-teal-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616ee2c6efd301a0e35c06c3eff20895961db3ec536172406710e23d0a6dc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138989 Malicious code in running-chocolate-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb77eade9c851555770d34c459c181ac2b42fd29241f721bf91dcd1693e23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139026 Malicious code in special-brown-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616776fc9a4305920d96d83a80d66e81a7b76d5659ff64c2e3c85883108928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138620 Malicious code in colourful-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e09cd373959464c2b553567b37856815f98e1e735eb355a835e2bc60ba10c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138623 Malicious code in common-coffee-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b157514f38c2a35cba6eb0fc85f30d7036b5c41460581d6a69c128bd0b25baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-scarlet-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbd54a7aaba2517971389aeb198fd0d9fbb733f07858dfeb849c38fc3714f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-emerald-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0045e631279ab1b48c16acb2f34432c6264bc2b0cd5d33998b4fb6832cb54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-brown-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec9571e22af8ac705018333dfc04423deac426b6636f83bf25de98942870258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-indigo-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dbf98e20619275027fd4151acecaf0ac913787eb11669176a745f6ee4bd1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-yellow-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac9fe13b222cf34787fe46db80eee50175081d57e34c9adecc138f5c77cbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...