MAL-2025-112426 Malicious code in unique_albatross_indigo-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9661ecf12e85de57ff316b3c9aa566159628d0510fc8fe4ab9f52a37d32f1d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112287 Malicious code in sensible_xerinae_olive-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df996ec1dac352aa662056b7e87651bebc3df365bad57905374ec947f898fdaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111802 Malicious code in desirable_swan_bronze-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46c2637209ffa07cc219730eb0819300e60921b0c1466d546365fda955d39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112474 Malicious code in wise_lark_beige-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2143a77fa1638731f0836a113790d43f7e40dc320be7073425c056a549c8bcdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111691 Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112201 Malicious code in pregnant_primate_indigo-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f276125411cb56471b958258a0cb5cee0c31ada355f97a55f0a4c9c3de49246b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_gerbil_scarlet-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7221c3cf492c18da0457003995746075937a8f23f2c17cb0a67fe6e16f477e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technological_cicada_scarlet-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e04c7a7338fd735f55689e0150073cd07d8307e4343ccb3bd9472bb9b5546c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in energetic_aphid_brown-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40869e2b602984bcab6e9e19cc9aa71c93b249f7619b132ca32c27025423f2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various_coyote_sapphire-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29528afecd3de002466106f1a21b41a738aebd201cb5ed297434966c8ba662e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_tuna_fuchsia-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac109c05def627fcc7cc22e5e0d9307c15160dce30afa6a13f42500a0de3a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_stork_emerald-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5cd1df64c5bdab5032e4267609646b4cca5aef6c2747f6fd3395ebccb2ae1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_raccoon_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bce1e7f57219b32c4293f253ef3bab6c37345d9cf36c7db6e59cc474fa6e6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_opossum_lime-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e28f917b7fe02b666ce82302b7343dd9fb506fe9aabbf74dd9ab49b864dbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_whippet_tomato-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5312a143a2874ce99bda8b40cc47890b3505c2412fb8a4496e6ad464495c4a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112088 Malicious code in melodic_barracuda_plum-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6047f72b375e81be4cdb31a5057504b11105031527c0354087f439132d6cb8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112332 Malicious code in sour_ocelot_cyan-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e105fef9fecb7adfe032ce9d11fa9057f49be23f6ebc470e290bf3e05302421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111825 Malicious code in dominant_condor_cyan-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df65015eb0ad73ea416c905871fefcc0cfaf3e5ce210669b60084744f3b16c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_landfowl_lavender-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a876f62755a44017f9c2d25c82ec04d0927b01ad9b22c6f7d2c32396804db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...