MAL-2025-139064 Malicious code in tasteless-ivory-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0d60a4ee774edfc3c1e340bded653eb00241516c929eb4a67860e6bcca6446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138751 Malicious code in glamorous-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c0d5cce03a0fe67643e84426006c83c80e17073c42179db9bb43dffcd086dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139042 Malicious code in sticky-blush-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebcbe8f2544cb864a3dced0d0f57cc2d8d5027b806ce8b1d990c962276dab17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139094 Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138705 Malicious code in expensive-sapphire-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705622d2e95c427d985ce2f0095e7f02ba8db307ea6fd6f933ffefc6b1dcbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138936 Malicious code in poor-sapphire-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee162fd526da4df56d69f605301ea0857b0794c46bb6f558559941d8ed7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138972 Malicious code in relative-lime-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0572147dd9d662ad4edc78ec7b74de29756babc7d0819322f02adb3227566f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138852 Malicious code in magnetic-coral-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1592d06dcc816491c6c04d174e0b1b77d5c9c612c3466a36c78a48e12072a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139024 Malicious code in sparkling-scarlet-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130fa73116bf0363dbecf9a3c9d04adad4232037eb140362b50f2c64c007fef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138612 Malicious code in clever-gold-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a98a2b6918c5f0eb5343a6c74c474ed9140c1e3673674306de71f0151d1902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138754 Malicious code in gleaming-chocolate-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cd5d3413a83d04a7ccf20e9d34dc63a03c2de5a34edf13653e6ee8d9d2f338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-cyan-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19fbb2801752b03d483f9540b0ce95aa3b83204d042ccf9d3da684df398a418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-tan-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3591892a613e88cc7c5efd8557f476cc0a784eb13ff59e7d8332cdeb17ef951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-sapphire-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee24576f1bd378fcb99cdaa68b77c1ae8e426d0ea3c2eaf522a8c786f18258ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5b7bbab3582f3c1fb0a049f6a9a421973428cfb0a7169e201057bda504bad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poor-sapphire-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee162fd526da4df56d69f605301ea0857b0794c46bb6f558559941d8ed7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-maroon-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a1982979ddc936cbd99a251a684b4680881a06ad90f821d1ab7caef576ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-salmon-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42648f11db276a954142308546267284bec5c46fed58fc79193a30dae30dcbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fandyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdade6e1ec652b9a046ed605ec3923b085c5589fd453f79db40f49ff218e3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...