MAL-2025-138750 Malicious code in gentle-white-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51b5704625dc22616c94fa29a4090a502bbcd4931fd27e209dce3e4e450d51b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138942 Malicious code in profitable-aqua-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00590405f461dda0098122e87e1c693979c95cfc3cc20f847d3d36bf0363f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138603 Malicious code in capitalist-amber-crab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6abc6b25fc120ce3ac177b2ffb84657067b0fe755e0219785ff03bce7a19420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138869 Malicious code in medical-tan-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce259aa8c0f820704c5dbc6c6e654b32f6f71b2975d0027a982606e68105814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138820 Malicious code in juicy-silver-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed825045165dc249d9342dc368258f6d714bcc564f49b26d0e90bd3529fa306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138790 Malicious code in ill-chocolate-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5555ac2c54f83f5d6054d0c5ca3c988693b9e111b21e1e7d6e7350584dd3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138723 Malicious code in flat-blush-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa17a2d6e43e30cb93591bb47c070f86ead0220b1efefdf057f8ae719f0f0612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139091 Malicious code in upset-teal-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9aed683c061efa23bac6961d116e752c5c30b9db88780b1407b374afcc64d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139092 Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-brown-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec9571e22af8ac705018333dfc04423deac426b6636f83bf25de98942870258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-black-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d484b1b3955d344c8437e7d180ac8f1e87c3e20ac5b3b5a2bc7d046da3ded104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138683 Malicious code in elderly-gray-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b959c5c17ab2c8ba4b992d3d10b18349b5b9d3e8a7f7a4fc3134853c0959c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138779 Malicious code in holy-orange-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b7228f85fdaae76010c05d469e84496256f1050173941e932fa7bc2926359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138582 Malicious code in adverse-amethyst-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0185f3b42cf01537858dfd8c5af427b2d70c3bdf8b3567d40f3106e37fdb5037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-yellow-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11875967658ee1e82049a0def74ef098cbfd003ce6baecfd0f2ee238c52c4eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138711 Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138904 Malicious code in obliged-gray-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04fe894ddc20327b2fb3e7036c84fe23114a4183385c745608ac91feb4a2778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138996 Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...