MAL-2025-103715 Malicious code in hilarious_dolphin_beige-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7ed5c3be1d9bbc312e33d3463909777f08e5be55a56a3d9b99f6206f5cdaca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101651 Malicious code in distinctive_dove_amethyst-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf3b392c75d52c7ac84fc042d69bdd43b16c3b9d84cf761a5634f1f82909265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103990 Malicious code in implicit_beetle_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bec9912d125ec2142493b4a1cc5c48b0426052ee9f141527652fefce31ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107639 Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101869 Malicious code in economic_camel_white-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5aa2c27e68a97e19ee8cc4a92663c4afb0445df664dbb372dd1f68664a031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99633 Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_sloth_teal-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba460a9e17ff728c2d681aaaa7dfd027aa62c45faf3abdc9abcd20d9ef7ab4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101879 Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105881 Malicious code in misleading_bobcat_gold-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b51858fc9b4092af02f1f2d410a1861bb1aa394637561b6d72a0f4694e1886d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_loon_aqua-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92882fd92dacde956da675f10f83ee743a283da03c7887b528ea2c46ffa0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108645 Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104301 Malicious code in intelligent_platypus_blush-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e3004399bfaef250895433e4b70b09665d06aa30e2acdc5226b8c6f515f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582032a100b9b3a1244fc73b35212694cca409388044b576dbc8aaee958922ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffbd41b1b8d6e77ed92ffedba32a868ec7dd8c8f165c5976ac234cfab60300f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bde860f1132950890d710d035467bdece69269384e76b60a05a798fbd54298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662370591ff4f1a88dadb69696455538479d9985183870d2dca43f7618746092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f193e5c688de0bf188de98f702ebb789243a821aa8b6b6c114746c0c6295cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9e4d2f9c8478c73940063abacbe93aea99eabcf1c2c8c29665ece80b95c445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f85f79a257acd7b2f563dd90215c57f82abb98505dbc5c67b3b5b4473bd970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19b0e711e2ea515c3db5d55270f000a40304965f2375d3f75901a43dcbda539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...