MAL-2025-112075 Malicious code in magnetic_skink_azure-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dac7d52f4e7c2d3e237892f091f2b6f8c47768d6250eb7516a0ef36c530885d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111929 Malicious code in funny_shark_gray-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72110ca0c1c40bf9df1d993e398d4f3387a9bee554b532057be34f34280c9abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111714 Malicious code in characteristic_flyingfish_scarlet-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6e1a52db0a5be38bce84c4e5f49865ecdb7ebf1d9131e0b36ba18f77f1a360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112061 Malicious code in liberal_takin_indigo-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab7807a5edc123a5a99e4a73664ed7e94887707ca08c08eb60d94c994d03433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_aphid_plum-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0fe7baa2007bf9a7e0a1a4166e476e0ce8f742a791fe0d66bf0c48c2b2803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_bee_sapphire-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f658b25800eadf90b920958a64ee863a4b5d6a584fb033be800a5f6c28bcfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112283 Malicious code in selective_pike_fuchsia-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddaa89e00a2509fa1bfc0ab0e696c826875b3f644cc35473499cf0d9cc12914a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111781 Malicious code in daily_worm_magenta-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d10d956b2a03a8d770007e1e5505f24b76365470cbfae853a74c592cf9377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111738 Malicious code in commercial_barracuda_peach-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 889d537975feacdab947193e8ab585e7ba742d02a8313036dd6e669307414436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111674 Malicious code in associated_quokka_salmon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629fad0fd8df97e4bf5f3ee6e1f528d98281d6db69b325764ca634fa5bf6f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111884 Malicious code in extraordinary_ant_cyan-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e944c5b890c2a9da85272b67ae1c5def5716df4cf5f4f8fc2d294a58c338b753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_reindeer_maroon-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20ba6a0945c706c17c8f760319cf405594d940c6375b9bf33b7a162c55747b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_lobster_beige-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14aa2a8b0891e0cab78c3799e5e13d6681662766c5016d192be0d4dbca77342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112350 Malicious code in spotless_dove_aquamarine-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5649f78ddaae56fb609b7c839bba1a7bc08d28888ae67162ad18bb56560e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111940 Malicious code in gigantic_minnow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713198c620745992f508abe85b5e5a164ebbe7310aebce5b9cf7113fb74717ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112466 Malicious code in weekly_cardinal_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ad9292d76d78f6f94561907654f1dcbed93efad692693eb6602da7b66d3bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c11de84fe93d0fd0ac4bea2ff0ca0f516bff30e2dd32bc86e7e8fbf9e7e852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_ferret-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...