MAL-2025-142029 Malicious code in enceladus-grunt-jabbah-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287cd32ffe0304dc3b78663929b5fb07c468c3593e8a043c53f160fac2438511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149875 Malicious code in zenobia-semantic-release-wolf-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f347b66bfab2ad3cd77af9a4c71ef499fd706c4458d617d5e954fd3e277f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66410a0bc1e30fc0454724628ceba7714eb23da1d2d92889673e46b130e2946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ce57605fa55e0e0b41f5c70af1494ea324e3c4b07e22d5bc4395adf36d81b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204ab8ac0bc60fa20b585cd646c2793d0eaf2542ee355587b94d6d0eaf180ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138770 Malicious code in heavy-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e0c8927e1efcec41bbca952ec4d9bfe454a025ceecad348420ebe101bf4a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138714 Malicious code in fantastic-copper-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f080f14db157fcd872069aa7162d09d6203c38cdbc56d3f1455484784b8183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139015 Malicious code in smart-tan-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6346393ce37cb8b00d5201fae5e8b195ce2de523c7d24b265a68e3f23021174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desperate-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37afcb136cfdd076602d69af9c7bccb5c32cd7da2028b47860a8fde2eac0a856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138782 Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138835 Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyonga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89509b102cedd27f8218e09a3d8eed64cd86ca9a485d41d9c8eb426dd82e179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate-moccasin-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51838c4420bbc425598253239486823d2251e8299ee48b3f77ee8de03b2557e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in known-green-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ea21280e0ddb21957b7e41e5deb88d67447b8bbea9ad0752123e40a897d3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138890 Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...