MAL-2025-148280 Malicious code in start-run-script-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe781b616783272336fc83c52ff140f961736366976234f8bf7a06d0ac590387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141511 Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139140 Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great-cyan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-moccasin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdc8cf54d1a0f4d631242c472458584cd3c8a458610f8062f1d9c0d2d221046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138828 Malicious code in late-white-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90eb10c7af4c8cef448526af282d5089bb64071b81a7fe476c4f005710c560fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138651 Malicious code in delighted-ivory-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e5c1f68d6d37f5b8fab0f107d7797627bd4c27009816cf3f7f5011c7a0882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted-ivory-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00e5c1f68d6d37f5b8fab0f107d7797627bd4c27009816cf3f7f5011c7a0882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138905 Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138678 Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139127 Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kupat38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b180f8ef83ca3f0e8c29beba75fe8df90aa91a7af2705a24d36d82aee29d5bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-serimuka78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6d803df09ddefd1144b5e65fc47823c35ee4e49f30ae0ee3568538af8f0e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-sambalado55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b138200470924f71a0ec04f017562e073e7cb3c79032daa9588719620a9326e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-tongseng16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081bc6f0cc91c8c162ecaaf90dc04d62a2aacd753fa1050d28b2dc7d3952294f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lupis16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f641b2ddb4bce164d0780fe4b1b0df2c02b99dc05d82cf781ea9d4365ea354fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bakwan88-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1268498f1ae70cfe75f49d29259a48d994e066413be08ffb8384b086f6af3253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...