MAL-2025-112368 Malicious code in suitable_pinniped_beige-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c7edc90f34d566e6dbdae5eac889fba3a948fdb7ea20996905c9a74088f1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112183 Malicious code in persistent_moth_blush-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ed174a62c9818b0d243d4632996727f416ab563765945b4bed89f0ea9df32e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111751 Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_opossum_coral-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618009c31448dacfcd53e9cf18bb70782e993965cb01aecea2e0ea84babb18c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_silverfish_maroon-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb544beb85c59bc4ca61fd4db8320e969f4e75020bcdcbcdcea78739a67542ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112040 Malicious code in itchy_squirrel_pink-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9e0e0993dc8daf36ddbff52d03d622655738bd8a33074abdbe04141c4eed91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111955 Malicious code in grand_cuckoo_amethyst-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e13abbaf072e6873706dd30b8532fc3ac21d4d16dad9fc9043221effd30714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111818 Malicious code in distant_pike_scarlet-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d84f6eb721ca6233034165fe248b9f113cbfa4cc9541cc9bedea9bc94b03c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111999 Malicious code in ideological_jay_magenta-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4a92874405d42f21b8794a02bb72dd028bedd10c6f44dbb3db4f53dbf5ce14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112080 Malicious code in manual_yak_yellow-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60c2d9c8cf0ce6513079aecbe9aa41b11462d0f91e8cda9b7863f9af14a1d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_grouse_red-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc77a07c60b08d2620849bfcc5bfbd6df6e14cfbcf4e2c790a63e2e1aa8811a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_aardvark_black-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f88a9b1bc10b9b2b98519ed5474fb7285af97c05e95a2dbd8e320bee7c827e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colorful_lemur_teal-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cba455c61fc9be3378a697bed7e445ca988003dc544bfd0e993067c40327e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112114 Malicious code in mushy_mongoose_harlequin-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d515d7c1e6b0e36ad8ba1827a48371dad7ad5699aab0fd9fdaff6b5f2a93f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112007 Malicious code in improved_newt_yellow-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b8d18a28a6a28fdf081ed668064f01c70236cd42eaa18502f8b68753cb96d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_constrictor_rose-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97baf9f8bc7dc3d11d00ef20cc558abd7c98dfce66e298e783b12141dc9082af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living_chipmunk_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea18e64bb6fbfb5f27282825e2cf539abd7d9436da879aaf6b20cc2e40c329d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112388 Malicious code in tender_orca_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f56877d60475f2e16c3e6683a89dcf90b825c68b6cbfc1b11e56b6b0e2c23cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111858 Malicious code in encouraging_starfish_amethyst-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eada363c44959d87bbc044d7914d47749c0b92b873b2f5e11e2aadbf88822f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...