MAL-2025-138686 Malicious code in electronic-indigo-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2314fd521ac8a50f510a66895297537a7f4a54a01b3766cf686a03b4bb10e31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138732 Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138653 Malicious code in desperate-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37afcb136cfdd076602d69af9c7bccb5c32cd7da2028b47860a8fde2eac0a856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139132 Malicious code in zestful-gold-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d8d5c4d38a05689240024d342aaf289716b8999697a27e9d74e389c8eeb910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138977 Malicious code in respectable-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3312d32f163bef50e05007aec5377a88a01c8ed46223f17c2acae757eebf0295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-coral-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bd82b3629a0b84b5e83f10a271821958279c419583ffcaeea63638198a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty-crimson-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262fe51f2f95a57ac51970166f9839c2b98e4ad24658a6b040c460cdc46fac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-maroon-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a1982979ddc936cbd99a251a684b4680881a06ad90f821d1ab7caef576ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02656cceb4e7ac01cccd5f7f32289d5e16a49c1b8bc908aaa45b22a06f90fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-tomato-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2462fd88d4f1162ad5132b0522ddf2ef308fc517f82d6c57d133033fe46983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable-aqua-clownfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00590405f461dda0098122e87e1c693979c95cfc3cc20f847d3d36bf0363f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139060 Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138726 Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138672 Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-sapphire-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824147e585993f28762d11b654fcbdc6f1e3ddfe503e5397c79f1795636fcde6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...