MAL-2025-138784 Malicious code in horrible-sapphire-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee24576f1bd378fcb99cdaa68b77c1ae8e426d0ea3c2eaf522a8c786f18258ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138665 Malicious code in dramatic-amber-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde371e43a8f2ccbd1a4118ee43bd258b0dbf755eb6afca4aaf022ec2d5deffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139126 Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139066 Malicious code in technological-brown-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ede7fac648eb907f0a40cee44c62a9eeed8211c5935f92f948cab14b107ebeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138840 Malicious code in live-emerald-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cb2a4fe3d628a62a93d72bdcb2d5e969c458ad330d00905c65783a5a5e14d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138761 Malicious code in great-cyan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-scarlet-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbd54a7aaba2517971389aeb198fd0d9fbb733f07858dfeb849c38fc3714f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny-green-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895ae9025a2a4cd0d8ba0dc1860b0d6e7b022857236574a2e078f9b747807afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puzzled-olive-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000b44c3eeb8c6a0e1289b0d1f78123ccdfcb7867e1241d926793c15507041e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-salmon-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed91ea073b631832261ecd74883598b43d4f979812b74e96809f01eb6064910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensible-lime-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3106c4a618770a4e3fbb05ded211c1acc2bf67e5e8126b0abe185843b87f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-jade-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caeba7607568ae7288d2ef3ea6901efd63f542379c0d139a5b20da08324aa434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-plum-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894703ee849bb67c5b9e8c54abe66797e0f3ee6b9e34ff534a946b2aa758ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-blue-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18545b51bbc892f47f3801016388c75c7f3eab05df8f12b9b06bb5d5286a241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-turquoise-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c079c1997c7efb62118230f56ece83a39a085f88bd3f0593d50f394de802a7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible-aquamarine-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986da177a3fb6e4cf6279a045c7ddd48d4d2487ed554f3de7722576181baf393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139110 Malicious code in weekly-salmon-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca9e3154061e65e59397c2c22e3fa9f87ba126a97e979ecede3258c4166596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138625 Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...