MAL-2025-111890 Malicious code in fast_kiwi_crimson-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f810d7c8955a38e45460fbf0710d7c472b45d3c2235f752134ed40f9b522f0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111633 Malicious code in @awee1233/tehkentel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6035e2114a3dde01d8795651b3e1597681379bf8aa43663b64f15835057d0741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112233 Malicious code in rainy_mongoose_tan-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ba6bf02850a23991134e64d4de8be27492afb976d1c1fd662836c424ca52bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112080 Malicious code in manual_yak_yellow-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60c2d9c8cf0ce6513079aecbe9aa41b11462d0f91e8cda9b7863f9af14a1d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_beaver_gold-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3b3a9fbb6ebbbf4b85234c9ece980fd4ba1a0cc6c72593ac2e9826c798b45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112207 Malicious code in prior_pig_blue-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91a09fe7c95b4256c8be3f7e138aed4efa21ab5c4a146e8e9905e488de244a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112438 Malicious code in uptight_iguana_salmon-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a2d9c78c70117bc9d642e926fb4504c6a860ea28a8049482950c7cf01fbf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112332 Malicious code in sour_ocelot_cyan-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e105fef9fecb7adfe032ce9d11fa9057f49be23f6ebc470e290bf3e05302421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112244 Malicious code in registered_bird_azure-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19699eef85adcd144b005cd40682140e84828923c2fcd975edc1896ade25ee45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111814 Malicious code in disgusted_finch_chocolate-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274b57dad0150cf911d2c30449548b004a184d8d81e51f544a2eae539ad88f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111825 Malicious code in dominant_condor_cyan-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df65015eb0ad73ea416c905871fefcc0cfaf3e5ce210669b60084744f3b16c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_gerbil_scarlet-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7221c3cf492c18da0457003995746075937a8f23f2c17cb0a67fe6e16f477e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty_meerkat_aqua-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccb81fcfcc08de2a906831b62bd334313d489182d7522c046d9edf5c087b13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_aardwolf_tomato-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267be77a77518784fbeb67a57aeb2aa51861a7a74d0ec8a08f3bf655fc29e366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_wombat_teal-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce118a01a7a87a5ccdb016b3f6e288b785293107afbb0103fc7e2ab3b6d7646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stupid_mastodon_moccasin-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c20ae5a29f0c8971143df10694a4562feb65863290de64df985a444db540cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfied_asp_ivory-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45725ac2914a1a152760b84f4122dff4b1148c941f6b8dfe661afb5a72fa8680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_haddock_turquoise-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdf3db229347b595f8581cf29c0ea772347f2a2169206f07c462cf1c9001c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_tahr_sapphire-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c273f6ee087ba3464e7f5c24be2bf5fd0c0fec12bf83895a652cf85824295e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_lobster_beige-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14aa2a8b0891e0cab78c3799e5e13d6681662766c5016d192be0d4dbca77342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...