MAL-2025-139051 Malicious code in subsequent-fuchsia-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f9369979eec35981daf24211fc2631aad510a816df0f80b5d3075e7077fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-copper-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da4edfc09fec73d8dc18b25cbee4c20017c4e661268b9c9b97767876140f84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-beige-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b5851dacf23aa7952819d3faba5c101e042512f09bd607d2e86d9502b15d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-harlequin-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ee12bc8df657031eda91ae45e9079c6d6bf6ddfffe84d7fedf523215f6281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-maroon-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a1982979ddc936cbd99a251a684b4680881a06ad90f821d1ab7caef576ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running-silver-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53fb3fefb14d33c5aa67f0e5b1c870659e1cc6a693e47837220d02ed2d396529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense-olive-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02656cceb4e7ac01cccd5f7f32289d5e16a49c1b8bc908aaa45b22a06f90fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139129 Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138962 Malicious code in racial-black-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d484b1b3955d344c8437e7d180ac8f1e87c3e20ac5b3b5a2bc7d046da3ded104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138906 Malicious code in occupational-amaranth-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dac78f5970a488917285472c72c67ff53a0c90384e403cb076c30578a0e865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138771 Malicious code in helpful-indigo-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073b7059a8d0026ccd0785079c933b238dfee08450669c873740d576b04c2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic-crimson-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5207ab0330e3364dada16a792ef352dbc7c9b2b88ba16191ef543dca2311f107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult-orange-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fc563a5ee0e2921e72af685639641d7b9cba9eaab7f13272f44a1f68d4cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remyd7fh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501fed8bec0c67578f202a34095b9bcc3cbae44eaa54aec08cde62f287e21757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...