MAL-2025-112271 Malicious code in running_snail_maroon-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e9e1bcbf0cdbe750f0de40141a2984d9f748e5140a1068db34445478cd69f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112320 Malicious code in smoggy_alpaca_teal-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747c77e1bc5e0ed3e42a445234358ed956b3f8fbfec60d8ec1e8e1e939987bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112222 Malicious code in psychological_chicken_violet-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe8a687dfc486e523cfd66eb4f0ea4fbf0213c285de8b3fbe2cff81fed91d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112502 Malicious code in zygotic_marmoset_plum-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2c39998ac42f81819244898f4e067d7c47cd853eea93f4498bce5fbf14c516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_eel_aquamarine-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2725e734bd408e50ba4efa2a13b737bb152ea86377a24071c7ffa7ca603208fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blonde_whippet_peach-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc6ca49025869cc68618b0a93169e50b97f92cf08dab8c8191ae3d3c828e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_newt_black-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9e699bd3f8ec9ee4a314ae8d330472bfeefd5ec88b2b741044de347a1d3b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_orangutan_magenta-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1816ff6513cd70043729c9fe4a2fe6610b19e1953af4f30c6532f196378e5447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_asp_copper-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e22b47c4d55d53c77a9666f80b6b5b86a4e0feaa0da7d3aabbf076e7955999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112179 Malicious code in peaceful_warbler_indigo-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acfbb1b593119028325fbdb9bf0db3dc776bc012044205e601c144d588d4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112322 Malicious code in smooth_chickadee_copper-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6baa30a95cebd775a08dba7e8bf2ecc5ef8c0fea4dd760e8af6179be967bdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112312 Malicious code in skilled_wildebeest_beige-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c12aed17022ea2d6c018d09d2384dee653fd469b07bb5dee606654b11f23f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112099 Malicious code in minor_wombat_azure-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccda0d0570821c42e70441865102dd497b70895ea6bcd0d3c6259ae3e9357946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_mole_fuchsia-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d988fbb16a7f6c3650c4cb970b298ea70776e441ab478968d56e313e2849d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_felidae_tan-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c98ecdb61ceabed50704945491a421a03432a4ac63caf8b915fc687ed5e6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_termite_fuchsia-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e56e6b2f0d16ea80a7cd1b4f91539b1b44f7f00dc930ad0ae657e2959594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_raven_emerald-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac338dd460ca6ec1897bba69c19e0bf17e5e76d8b2653b505bcacf5472b4ca80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_python_chocolate-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee78c995339138ef16f17c91857cf04ae02c7538a9215e8aab2b74a069b2631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_wildcat_coral-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c851b0c9b4f399b7c3959b32879358a3fd992ee1ea08ef7912fbaff57ff9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...