MAL-2025-138911 Malicious code in only-tomato-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc87ed6f0f3019f6c23d86db67be6d7b912477d56ea8b23667d8c250f6efe692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e09cd373959464c2b553567b37856815f98e1e735eb355a835e2bc60ba10c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate-moccasin-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51838c4420bbc425598253239486823d2251e8299ee48b3f77ee8de03b2557e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-plum-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665afb222b38618c8fb7fc4731102637f58abdee132b4300f3001985c74f12e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible-aquamarine-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986da177a3fb6e4cf6279a045c7ddd48d4d2487ed554f3de7722576181baf393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-yellow-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac9fe13b222cf34787fe46db80eee50175081d57e34c9adecc138f5c77cbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138889 Malicious code in naval-apricot-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8105bd841ae1ad95832fbecbb30ce03cd2f3e4a611c6579f115b3565a5bf9d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139032 Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral-beige-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec323bc8a8adc02eee0dffd7d5a36902539afeb9147920b242298f172f696fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic-teal-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b52c3fee7dc7f21ae8816350aa42ba884fe9f87afb9571ee1e133ac48b9df96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138642 Malicious code in curved-orange-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ef8856f41d66e8d2bfd6b417060f717f920ce163201c6db6b71acdd9ab6f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-peyek97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a5245b55a2a4dad93f591e8d837ae8a324131d0fb3e4d8b39d49757d52d445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sate30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0865e2efcc8cfe25d437b0a477f0c99dd44e397c935775b84a1fbe443b6ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-keraktelor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9447d70f11538421728ad2a42dd80ed4ba7f274740a7c60de74f971f2aec69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-rangginang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4fe15b515a03450ba272178c1c2b7eba4cfe5908e942d63eab690c24a747fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-lapis90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be60c3a9b4836ef4131eed4d96fff8c9a2be7e864b94638ee9261d44cf2304f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-rawon64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3303a62159b60657f9b6f66f77374e80eb98d6bd50bf39caeb2a1f1859aaae93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lutis76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f029da9ba8b9539ecfdfbe35533b3abe01f6ac85d4b8d3fd25b1040fee168c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd896488836af5467af36df86c1a854548ce9b0dc27242d8cea7bcd0270db488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...