MAL-2025-111915 Malicious code in fond_muskox_chocolate-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 649dad5cac7bc56e1f25e3554c7f2ff87bb38eed74035d9527da2f4f126ee498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112396 Malicious code in thorough_bedbug_tomato-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63aafbc84a4e5dae63769376b518ee2bcd812aec5d429ac7d7685fec368c15d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb_hedgehog_blue-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760a571948803bafdf742b5f3d2150efa5cb504b777b2ac559aa1fce89f725a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic_skink_azure-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dac7d52f4e7c2d3e237892f091f2b6f8c47768d6250eb7516a0ef36c530885d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical_lungfish_blush-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6af0ff2da23d28a9100dfb44e51bcb3240dd805c452977ca08c129cea4b2f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111695 Malicious code in blonde_whippet_peach-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cc6ca49025869cc68618b0a93169e50b97f92cf08dab8c8191ae3d3c828e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112482 Malicious code in xerothermic_yak_coffee-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8802218039aaf63d918289d22b924dc52766b15f2f407e4dd7ce9d465438486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112486 Malicious code in yearning_amphibian_plum-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fae235cdc0ef2ff05114cf3f9f089b1cf6d3b80b515b638e112892b7e2e00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_stoat_amethyst-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd5cfa3b156fca70d40ec8784d10cb3690b9bc4a255ee7bc8251cff5c0ffd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_tuna_fuchsia-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac109c05def627fcc7cc22e5e0d9307c15160dce30afa6a13f42500a0de3a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112300 Malicious code in shiny_fox_amaranth-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f3476989daa01c63138a9ba3e858673cd10a5c01891813332dafc3519bfa3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112005 Malicious code in implicit_toad_peach-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0ae99a9b07376a648fb7b0e6fa79b1cd6a9798677aa628cf3db8fd7e0daacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111945 Malicious code in glamorous_dragon_lavender-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a766adec22d132f9f52574ef5fb475f1092eef40799c9f8bd0d96685071b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112279 Malicious code in secondary_chickadee_amaranth-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cf109238e5bef50cab0a13adefc91318faeff765afe8a8e060d315d29f62e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112322 Malicious code in smooth_chickadee_copper-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6baa30a95cebd775a08dba7e8bf2ecc5ef8c0fea4dd760e8af6179be967bdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homeless_puma_yellow-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3ca661ab6d3271444b629ac9fa657b1da90c47608e81179eb7b3d81a98fac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_locust_jade-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ccbdfe041e861498ac711137aebe41777c4a70d14ba81426d54f00cf300fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_anaconda_red-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3a777a779c28798c0cf8c7b34e21b007c216da4025a072fde2b5270a2c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual_goose_turquoise-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 240e5164a21ce95df452cc966409f32075c83e043dd9a68d780acc2900da33dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_crane_turquoise-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c38720061c06a254d61b832504c32cf4286da27f126000bbf354efcb06865a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...