MAL-2025-138727 Malicious code in fluffy-olive-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fe395414a455d1f5ee1d3f47b24fc95e181fa1989275b8438058bb45a61f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138960 Malicious code in querulous-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138911 Malicious code in only-tomato-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc87ed6f0f3019f6c23d86db67be6d7b912477d56ea8b23667d8c250f6efe692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138811 Malicious code in interesting-tan-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b840a0b6ec6c6242b298dc58787a8ca6bd2f374e7b8ce6f2fa3b3dbba356d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138736 Malicious code in frequent-crimson-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a6facfca29c6ac2a7ed67fb8d73c51fdddc074c47b5253fe74da6a1e16fd54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny-orange-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798765f26efb93ff4f1d23a03cb7fb342a0454a0f988b24750d8f121afd174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest-lime-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95261d4a1333a38b39c936f972a46ef6c05fa1cb0c1bfe38a9843216b59d55aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292b50a4c914df6a4cf3e6b10b3eb402d664283510b566a5875c88f52ba78f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous-sapphire-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6869967895ce9ad4d553e75822f46f21ebfc6bcd39faa126ddb0d2eaaac832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature-olive-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b1e0332300270e88dc7b8badb6746f7ee2ef8a163e80bfee954b250041dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-coffee-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65ef4b71f6b9c8b9346c018eb051bbca8100e0347f5f02ed86c6bcc4e308c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-olive-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee55b0595e776f8d9225a44a4c603c623af94b0d72d54632ef8ada5a0b01ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1eedb420cc37719c39433766087d1e29a23f2c97a0ddff500ad02bb3881002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd790877abf20c0be41145737c373e5e0c49bdee0530f9deb3514e20fbbdf7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-red-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a18632c06042f55d22b79ca3d45debfbc72ed14d2eb6c51670bb22e13e2186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult-orange-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fc563a5ee0e2921e72af685639641d7b9cba9eaab7f13272f44a1f68d4cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remyd7fh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501fed8bec0c67578f202a34095b9bcc3cbae44eaa54aec08cde62f287e21757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...