MAL-2025-139070 Malicious code in tharkunad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4cd45f426ebc0adc00027e3cad2b3ec913517f82ba22215ed47354d7c1a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138944 Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139007 Malicious code in silly-ivory-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9f2f9084c87b42668326fd4ab3ff0f5546bea3bf332375c670ee4a9e993c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139022 Malicious code in spare-chocolate-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a627c45b9b21cff9b80758c834e1de92978da4843201f45e2f092cf4d86227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact-salmon-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7044b40d221b50f9cb6b01adeb01cb8e2115df9a991d7040b6ca26a60e4eb610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138766 Malicious code in handicapped-crimson-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6958348d2e05f511c65da6531babfbfdfc8f5799f38521d39d65710a18f3b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138634 Malicious code in conventional-magenta-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60562508b9a49e5183b75a047f8b6573c505c8021b6deb45a24ed8ee42eeca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139075 Malicious code in thirsty-apricot-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e470e47f2c1db0c752eb315729cb1aaebdcca4a5fe136e905b78ef9ca9f19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138628 Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139112 Malicious code in wicked-red-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889f681a3b15c54b0b220cf724a3642aca92386fe45e72d8677e5bbb23909ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139062 Malicious code in tart-moccasin-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863d5e0a7c3f3ed55de4f449b0b715916e1f5160bb989ea4d1065ef4bd24ea39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-bronze-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef9e82aae009594b04b907205f72f7f67bdd69d69937a6724d0c0b84ce246ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a516dd75f03311bb057315566aac32c053ee9fe9e644fa8a8a4f97d4f4b922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mie100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2613cd1b5ae092a270f099fd1e81de01652ae6a79f9bec9106552cc107bfc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-naget45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16dc8d6fe00d32fad50211b22c8be56c3dd0037955669f5ac0218559093fda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kue59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d5757c41d388915f7859898ddb3f036e436514808554ca922d8f9daf670695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-nasisayur71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed0e8d6d2029e1c19ed8bad0b7158c39d6930107bb386699879f3f09844312b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-mendut81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7403c18753ba459cae45cbfe9e2a6396f56a9d69b0c64fcd9224fedd67b9c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-rawon52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a3fa8ef411c942ec67d065feefbe0161761540b97b9ce6c0973f11d641075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38759cab2230b3d7234206e9e3e2528fc1a566e7a09bb58309bf52e9b0dc5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...