MAL-2025-138866 Malicious code in mean-salmon-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19747e08beef00c0ff50ae824663ccc2a186e08cef376c9a8b33a9708d7b2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-lavender-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3102ebe0d1b896ec2df366bad0530f730278d9f7483883ec08967534fa2debca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-amaranth-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d915a045bf2eb60d8439b9e870b610aec56232db06f90092cf835d0c3362757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02656cceb4e7ac01cccd5f7f32289d5e16a49c1b8bc908aaa45b22a06f90fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-lavender-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be406abe776b818c911262390171900eec0aabd095ad292a6c06d14b14fcb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138992 Malicious code in scientific-crimson-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f47ea463fc9d144ba747e222edcab1a5d0d703cb6530843365c73ef5c25b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138789 Malicious code in identical-ivory-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9801c2eae353d37f40917575b5baa1b0aa044d12e673eb47365b7e0ad2d5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139129 Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-asinan60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79175b2ef652d9ca3a3073b56f246370a93fc9e03c2144a733eda48e8fb770f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tempe15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c6a2d293ac06f4f4c2207c8454570c89c073e9c97ee6e42927e8810255f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6278f9a597732503eea330c3d4cbdfbde2aa97232497b7729ff6b2d47948e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6f6643284343f30802f86f82a2ebf4ce93547b640ebf5971ef0c77f947780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-nasiuduk1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353f378be2ea2b781e718357cbbbd20eb354dafd12ed3d0470378b8a0e3f283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mieaceh93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89e4991e1e46b9667b9fb511a63eaf666f75ad336409afcd36e130537e4cfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f445785c18c8cc8cd2c7493e880c1be1f1d05db140c66051bc01394dd4f33993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rojak95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3638c8846d100cacf3a258bc152902111c28398a8e7714b1a2e1bcb9b777d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da108a98643b85d28dc1dd42797bf2c385312bb7c2f1c5f98ddfaa19e26a51f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-tahu73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 305e74518cab32deacf5c4594814515319dba29ca69ab93f8f8457a8246edfc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-klentik13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261ca6ed8d593c492c15bff16a83dfab3c6684705d03bd5f3dc06a7c4e99e7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...