MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_ocelot_green-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea290526a3ad5abc584ea98abb5e9f98e4f7360567e215eb4da4ed373e432313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_mackerel_pink-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d5da517bb26b55facc01da24d8b0943e522809bb7d4992807d3e2d734a9966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_bison_amaranth-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a0f5f9c72bd597d3506e654767a293f113a0e07ecbc3113808d8d7e248e27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112093 Malicious code in mighty_bobcat_turquoise-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917939580d28c2e1d7947440da679be659a28eb63e2882d26bbe9ed3c63f8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112275 Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111712 Malicious code in causal_macaw_aqua-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bf5f5a540997a91e68dac4c230af6980f973330fbfd8b294d2fee37dd6a4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mackerel_aqua-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091518d72d9d8ca51085b773f1f1f3844e61a21933aa1ec442c57ccd299756c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112003 Malicious code in imaginative_impala_pink-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d40ddbe379c47bb0c4d67f42ca72d7c1b8620af6fc4b3eb744c338379310c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111821 Malicious code in distinctive_bonobo_green-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cca37629d6d3005eda704d9bb90ed1c6282d5b8c4c9e84d84dc7072d19a9fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111945 Malicious code in glamorous_dragon_lavender-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a766adec22d132f9f52574ef5fb475f1092eef40799c9f8bd0d96685071b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112273 Malicious code in sad_opossum_amethyst-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f05d6a4970d0f159a473e896c67a511e9646febfc1965e5463ebd0bcd5e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112157 Malicious code in original_orca_silver-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f87f761817666aade352edb45ac8e30fdc6baa6249be42c7579afc1337e88a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_warbler_scarlet-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8627c9e52b969ce498d00b9f3bcac65921a4f5f91f9017c41c66ecc1107a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112457 Malicious code in vulnerable_bandicoot_blue-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a10f8f1b656f1828846b943c9e1b227ac381c4334e10cfa5d01885818bac1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_carp_lime-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da42f5af0e0285226f83645cfc2b76d96417c409f52fffdcee2001dd3c44f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_salamander_green-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe031da532dc2b177e25cb30beb97756dd0e4be92fe80005b2f30146c562a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable_kite_brown-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9818c6a2e7aaa381dd606721f3ab616826876825fedbf8090aeafe1993f2fb06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom_fowl_blush-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0e2799a2dbc5d9c557e480074764e0953c04397fd4a2524c18909bb18f2025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...