MAL-2025-138726 Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138732 Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-sapphire-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824147e585993f28762d11b654fcbdc6f1e3ddfe503e5397c79f1795636fcde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139060 Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139016 Malicious code in smoggy-lime-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53897c4ff35fa4579e29ca086d5717918f25b29a030ccfab161c605dd9822911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139132 Malicious code in zestful-gold-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d8d5c4d38a05689240024d342aaf289716b8999697a27e9d74e389c8eeb910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138977 Malicious code in respectable-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3312d32f163bef50e05007aec5377a88a01c8ed46223f17c2acae757eebf0295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-dodol26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52f2bb29caccd3861136e0e6f3ecfe5ad88ac6ca5d60d139bafc6aa252877510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-martabak38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e04003d86ed040cc9fda1c0620a53189d0fced83280675e8007974a34e5539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-bubur73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd142dddeb540ef896a8f6dda6425199925801760c0108a534a96f92a46d2a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-botok82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5461ce96ed86cc7db5776f3d3892451dab0f3b5337d0ffb62540e546969c48bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c378b919273d88722d27884c2a20121398d92b0262aec9ee93d149111a4eea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb5fd46873f729cf6746399f102c2886b0501fa38e12c553f70ad5041351f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-klipo34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b399b44754745859b1bee70f5adb821aa2fe46a7872638813e4411b4303a3fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...