MAL-2025-138815 Malicious code in involved-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun-coffee-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9293f754899af91b97054d6cd10012bfe309ed9d770febc6f6dc038211f422cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient-plum-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665afb222b38618c8fb7fc4731102637f58abdee132b4300f3001985c74f12e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim-ivory-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef2d7b6ee0045011942c4eb2ac8391d2d977b1ca09bc72e10628e399ee0bd251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-emerald-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd7ebdf01c168f7afc3ec5d5a1ba2a30e2d31f5b04aa30336521f00010f12eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138851 Malicious code in lucky7776329 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c92c8f08edae8528d35b61c2534dae4487c2a062d37869ed4b082ccbc1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138968 Malicious code in rear-plum-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffd81f1734d7fa552bd5594dc59d95992e061a66053a76bc90bccdf93c4904d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138947 Malicious code in prospective-indigo-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615170e63c85a8c696264d65ce77a67dc95e4cc3fe9d79788c1bc5b8e65950d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138817 Malicious code in jittery-emerald-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04db678b098a8dfad59ec0f2a60cc57030078dd629dec285d829585ed6eea3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138702 Malicious code in exclusive-amaranth-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360dffed6c70e9c222c697a15ab756366193c77dff4a7f17660630761ee9db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-bronze-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eba78c701c91e88fce0d28506d839c47d359be22863e170d20f40a50262e76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138640 Malicious code in crowded-coral-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bd82b3629a0b84b5e83f10a271821958279c419583ffcaeea63638198a81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138601 Malicious code in brilliant-magenta-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592164f2b0fcc3200956fa782a2a9a4ac824ccefe8eff9705aa4b2b85c52a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138645 Malicious code in damaged-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1eedb420cc37719c39433766087d1e29a23f2c97a0ddff500ad02bb3881002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138668 Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa70cf8c14b417afc11d25f013d7cc8052689af6a821e01251e216fae7bdec94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e28116b3a8c0c6c8b8e1b6b5ec1a07045c984eb5bce7a144bbd37e80b4bc13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-soto89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dd3bf68b36245debc3b9f3f31cd5fd695f5521e39eb60e227b9822b2603ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-asinan68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4769a24bf3d7e762586357808173e0f672a91f392815cfc0483126c48eab0ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...