MAL-2025-111826 Malicious code in dominant_tarantula_ivory-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d8bd512354654e0cfdda6119675e2758ae7f2ddbe2cd473861d54c09fed980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111924 Malicious code in frightened_landfowl_black-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66151be2ae0d56b3952e36eeafc65ef19771c5b6ea91e6bfd3959031de0b7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112351 Malicious code in stable_flamingo_magenta-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8958bc46eb7a35cc67f195654cb2a6ada99cbbc4ae19ea250485cff220472e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112015 Malicious code in industrial_damselfly_orange-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5964c4461b57384c7e3c8463a4ff99015cb488664431b55aac750edca4463357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_turtle_maroon-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a6eadbd242e70f265a02f89154f5249d969dd0a3569c5276dfea6c3d06630b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_giraffe_gold-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b608b0e2822f2bd8a43f3fa615e282b7a415896d66ffc5f69c91c9c10a4654f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_cephalopod_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0169e6ecd28c1f903c29cd4040fad0c900f5839bc65f5651f2769418846c826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_pony_yellow-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8690f4bb6ad10d962c246874c9e4607064c2d85607705ef997780322f34ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_whippet_beige-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b0797251633faa37229abbd6bce30878c22e2300a6bf32fed9dbee97a9153d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in energetic_aphid_brown-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40869e2b602984bcab6e9e19cc9aa71c93b249f7619b132ca32c27025423f2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_orangutan_jade-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5f3cddbfb26f09c48547be6aab60f2edb5be24268b470dadb0903cb095ce6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_mole_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a023b13ca7d40a8605711d8c5d30f7a251e3b646151dc324109c5b16e61b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_pony_crimson-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ac8df03891707c9e187ecbf79bb4a90e253c4218fa06df8a41a651e5d8fab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_camel_scarlet-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fae818680a42309ebd6e7b7594c088d14c35347f727bbf1827211fd7220d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_dormouse_orange-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b15175f74743756932e00ff54be80491d8e01b87dcd2f9070bf8ec3de98d9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical_lungfish_blush-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6af0ff2da23d28a9100dfb44e51bcb3240dd805c452977ca08c129cea4b2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111878 Malicious code in exclusive_goldfish_maroon-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cc02e06c9b109b60fb34ff58b4ead0b15a545e7deac4ed15e6b128643e9833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_albatross_orange-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d268671cec5e80ea66cf5a1827f8ecb2eb829ecd76db8d634c71ff286e1f1e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112390 Malicious code in territorial_halibut_indigo-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc9bfc29a15860088bf626f96fa582e435b7736aed757bebdf23e4bb4eafefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112172 Malicious code in parental_galliform_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f03b9e52fa4be9c9f0d1696a6b36a7e60b0b4fff589a4d9530c09d96e581338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...