MAL-2025-139254 Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70a40f34ac270e32d345abe4cf6f6faeffad82b24fe6c6f9731a29532fcad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138977 Malicious code in respectable-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3312d32f163bef50e05007aec5377a88a01c8ed46223f17c2acae757eebf0295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138726 Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138960 Malicious code in querulous-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable-aqua-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00590405f461dda0098122e87e1c693979c95cfc3cc20f847d3d36bf0363f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-tomato-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2462fd88d4f1162ad5132b0522ddf2ef308fc517f82d6c57d133033fe46983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ee12bc8df657031eda91ae45e9079c6d6bf6ddfffe84d7fedf523215f6281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02656cceb4e7ac01cccd5f7f32289d5e16a49c1b8bc908aaa45b22a06f90fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-sapphire-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824147e585993f28762d11b654fcbdc6f1e3ddfe503e5397c79f1795636fcde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-harlequin-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...