MAL-2025-138987 Malicious code in royal-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6807c8de7271a95357be7c721520fca20952d774e11852cccd1a10c20c13f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138957 Malicious code in pyonga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89509b102cedd27f8218e09a3d8eed64cd86ca9a485d41d9c8eb426dd82e179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139028 Malicious code in spectacular-azure-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb1e1fbbba7f878cd50573fb7c22a15023dbf7a797b0c9ace9fbd7500a1e8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139064 Malicious code in tasteless-ivory-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0d60a4ee774edfc3c1e340bded653eb00241516c929eb4a67860e6bcca6446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138808 Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39323fc49189bdc215d3a69c5d427e192d7c99984ebec3c5fb5d146e6cf91de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-copper-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c94d415e9762107a032bd4286a05d7948b45bbb787b79fcc62e39acd4a3ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-lime-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af506b719f193f812c11d1cbdb9f070c854998223399bce8da84cc45a79d2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-coffee-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bff92247a9e6cb083fc07fcfdedf3b1a9ca205d45cc4370d9a15f7c874727d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138853 Malicious code in magnetic-cyan-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69618140d95a93dd960616e1711555b0dd44e745b6e3235bcd933d5a4706ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3312d32f163bef50e05007aec5377a88a01c8ed46223f17c2acae757eebf0295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138656 Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138842 Malicious code in local-aqua-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d45c913bbc73a37fd3cba872c5b0b747074cd3806fb01b2ea687136384857c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138930 Malicious code in permanent-bronze-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085154849ecd9d851b716739801e5575c18af0883ae093750a41601c128ef731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138954 Malicious code in purring-coral-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fd356cbfe0c2f97fbaa684dde368d7049a30f8c0cbbb9f17d877a81e8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138641 Malicious code in cuddly-salmon-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d7cf04aad6f2a06133f45d1220eae087ff54ae6af7741630bbfd49b116e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138655 Malicious code in devoted-red-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76490f3e6232a7e0626fdb703b1ff71beb526e993467e889a3401a77831b0db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138630 Malicious code in confident-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ee12bc8df657031eda91ae45e9079c6d6bf6ddfffe84d7fedf523215f6281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...