MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143565 Malicious code in indus-global-library-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd552bd8faaa141a7acca92b5937a48130fccf430c87326b0d9ebe7fd4dee40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141157 Malicious code in corvus-levels-winston-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf00a98772a23d0acdf2e0f571ae86e7537587f184063460e54cbff80f48f446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144418 Malicious code in link-ora-loglevel-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81750155f6317d515808884158c0219879bb3a01bfd1e4f522848f357c7a422e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145332 Malicious code in nconf-ultra-phoenix-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23544b478756bcc91654d2d0acd95386311f1aee22d1468ec6edb87ab4e4412b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141446 Malicious code in dactyl-lint-staged-achernar-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920ff036cda7e2b9c2eb43fd7bfae957bee9711f69f147fa6680168f03ce46a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70a40f34ac270e32d345abe4cf6f6faeffad82b24fe6c6f9731a29532fcad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable-aqua-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00590405f461dda0098122e87e1c693979c95cfc3cc20f847d3d36bf0363f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty-crimson-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262fe51f2f95a57ac51970166f9839c2b98e4ad24658a6b040c460cdc46fac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138591 Malicious code in available-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e82c53a08ceb07cc6658c93d6ca369aef45a2d9d415128867630a8c4eeeae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138897 Malicious code in nezzyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9a1ef9d9917a11a72dd9a08d959bbb0d0afd0e435ad0cefcf15631848696f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138686 Malicious code in electronic-indigo-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2314fd521ac8a50f510a66895297537a7f4a54a01b3766cf686a03b4bb10e31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138894 Malicious code in net-salmon-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8637a889054a27d0cc482fc3fd9e5d4d6630328fb24a5ec669a7994033f221b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138732 Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-tomato-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2462fd88d4f1162ad5132b0522ddf2ef308fc517f82d6c57d133033fe46983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...