MAL-2025-117546 Malicious code in tuti-keraktelor66-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 425b532a807171c900dc963b2f178902b6ce3d9221ce881eaa56273d73735c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113483 Malicious code in dono-tumis21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0562356cbbf1e5754d2a60bb99e8727edd9061069c6d9b4bca7cd3c164399ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_rhinoceros_salmon-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eefe3dccde15409586427b6a70d4c0315715e3058e1a20b6062f830e9037c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hoverfly_plum-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138e4760625e9c7196231528feb3d0cd6eebc18cc3d61035434b17ec012680c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_pig_ivory-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c369aa0934a2ee12a048dfcb96e7c315c9a1634584b5f852b2dd9e89d147c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_ferret_fuchsia-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1974a7373c1f263276e645c9ab34a393e824cd4a872a8f0cc6952a0bdeb3d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_yak_yellow-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60c2d9c8cf0ce6513079aecbe9aa41b11462d0f91e8cda9b7863f9af14a1d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_snake_orange-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed116846be0ec10955ab6d165daecc62fb2bf1e88293d362f7751bd6423718d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_bear_maroon-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf2048d743b6e4fb782ae76d4c50838beba267db6021d53baa0ff23368544cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111757 Malicious code in continued_mule_ivory-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d19616e5466708a585ab1140d90ae78c2724a14067b1f661f1af7637c0b8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112474 Malicious code in wise_lark_beige-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2143a77fa1638731f0836a113790d43f7e40dc320be7073425c056a549c8bcdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111782 Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111898 Malicious code in filthy_roadrunner_cyan-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f3af3760cd6b5ed0531c6d9f7acef3c2916d045e2a82cd7d6e905feec09cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112234 Malicious code in random_stingray_lavender-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d72c86e2933b22bd946eb0465eb4273cc9370c78c6ddea762d7edf0a4ac39ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111802 Malicious code in desirable_swan_bronze-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d46c2637209ffa07cc219730eb0819300e60921b0c1466d546365fda955d39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111777 Malicious code in curious_takin_indigo-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760ee835cf085b37bcd5f02912d475f128dd521d180b601ce9ba34344c1d1b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_ostrich_maroon-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99e6fcfc9c1b2bdc248a65b2190f652a7affa048eb26ad05d3c26018f967935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident_capybara_crimson-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f9024b7dc31552755750dc682027521915e6afc6f027bb82698631b26ffd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_orangutan_jade-81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5f3cddbfb26f09c48547be6aab60f2edb5be24268b470dadb0903cb095ce6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_raccoon_magenta-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bce1e7f57219b32c4293f253ef3bab6c37345d9cf36c7db6e59cc474fa6e6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...