MAL-2025-112201 Malicious code in pregnant_primate_indigo-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f276125411cb56471b958258a0cb5cee0c31ada355f97a55f0a4c9c3de49246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112287 Malicious code in sensible_xerinae_olive-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df996ec1dac352aa662056b7e87651bebc3df365bad57905374ec947f898fdaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112343 Malicious code in spicy_basilisk_silver-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f461b6d0a1172f9e029b96dbc074ea17bc592075d48ef012ca89a666fbf45160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111802 Malicious code in desirable_swan_bronze-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46c2637209ffa07cc219730eb0819300e60921b0c1466d546365fda955d39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112011 Malicious code in increasing_perch_white-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402c00139c6d6467923b35938481c62b02a45719fd71589986abffd3f56abaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in energetic_aphid_brown-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40869e2b602984bcab6e9e19cc9aa71c93b249f7619b132ca32c27025423f2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_beaver_gold-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b3a9fbb6ebbbf4b85234c9ece980fd4ba1a0cc6c72593ac2e9826c798b45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various_coyote_sapphire-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29528afecd3de002466106f1a21b41a738aebd201cb5ed297434966c8ba662e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_raccoon_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bce1e7f57219b32c4293f253ef3bab6c37345d9cf36c7db6e59cc474fa6e6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_whippet_tomato-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5312a143a2874ce99bda8b40cc47890b3505c2412fb8a4496e6ad464495c4a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_cicada_scarlet-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04c7a7338fd735f55689e0150073cd07d8307e4343ccb3bd9472bb9b5546c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_landfowl_lavender-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a876f62755a44017f9c2d25c82ec04d0927b01ad9b22c6f7d2c32396804db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_gerbil_scarlet-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7221c3cf492c18da0457003995746075937a8f23f2c17cb0a67fe6e16f477e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111633 Malicious code in @awee1233/tehkentel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035e2114a3dde01d8795651b3e1597681379bf8aa43663b64f15835057d0741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112107 Malicious code in mobile_chinchilla_teal-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a26fa09e8ac59effa34b47aa13660739610f61ee10eff76692fa481d5adad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112233 Malicious code in rainy_mongoose_tan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ba6bf02850a23991134e64d4de8be27492afb976d1c1fd662836c424ca52bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111987 Malicious code in horizontal_giraffe_gold-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b608b0e2822f2bd8a43f3fa615e282b7a415896d66ffc5f69c91c9c10a4654f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112332 Malicious code in sour_ocelot_cyan-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e105fef9fecb7adfe032ce9d11fa9057f49be23f6ebc470e290bf3e05302421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111890 Malicious code in fast_kiwi_crimson-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f810d7c8955a38e45460fbf0710d7c472b45d3c2235f752134ed40f9b522f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...