MAL-2025-139104 Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139062 Malicious code in tart-moccasin-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863d5e0a7c3f3ed55de4f449b0b715916e1f5160bb989ea4d1065ef4bd24ea39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138662 Malicious code in diverse-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ee28df6210a54b22e0979313c1d2f14b129bbd0701896678ec226afc180bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139025 Malicious code in special-blush-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f800e9862b5389aa723547d0578af4db51d0bbe834bd0e3b777dfb138d6384e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139007 Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138629 Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-salmon-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed91ea073b631832261ecd74883598b43d4f979812b74e96809f01eb6064910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in far-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c965672f482780685fcb3533f0acd0769416f4c3afc12bb4d9cbb5d910221e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138766 Malicious code in handicapped-crimson-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6958348d2e05f511c65da6531babfbfdfc8f5799f38521d39d65710a18f3b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139070 Malicious code in tharkunad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4cd45f426ebc0adc00027e3cad2b3ec913517f82ba22215ed47354d7c1a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138628 Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138634 Malicious code in conventional-magenta-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60562508b9a49e5183b75a047f8b6573c505c8021b6deb45a24ed8ee42eeca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139112 Malicious code in wicked-red-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889f681a3b15c54b0b220cf724a3642aca92386fe45e72d8677e5bbb23909ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138973 Malicious code in reliable-sapphire-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d415cdb3b27d3a025bec726f6bb6bf6c68fa1d5b0a883b2f8f947f9ee180e061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-white-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d143c2eca61ce2e0df04e00bcc7451f2ed06ad462a352ff7a319eb1195c22ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...