MAL-2025-112363 Malicious code in stupid_hippopotamus_tan-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce76b3cf300cf6ad1fd9ada5fadd8f424bbca6cde1cd62dd0a053d543b66664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_shrew_red-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9089ef7d25604d035d061a42ec826101f01030719ba2e40cff1c5a4dce90eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_hippopotamus_violet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 813a4190f464b6fdd93ef549da98a052f14f953ef917efd869085fe8ba4db6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112432 Malicious code in unnecessary_wildcat_coral-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c851b0c9b4f399b7c3959b32879358a3fd992ee1ea08ef7912fbaff57ff9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112028 Malicious code in intellectual_guan_harlequin-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d894a2652def21c774ecc37f6e5d26727257402bc87d2da3f9edcc16c45e796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112247 Malicious code in registered_turkey_rose-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e2e3e0ea54e220fee3c431fb4d26be007a01d5ce383b8904826e4531a2678a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112058 Malicious code in level_aardvark_black-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f88a9b1bc10b9b2b98519ed5474fb7285af97c05e95a2dbd8e320bee7c827e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112383 Malicious code in tame_pinniped_ivory-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b3cf44c0283fbae1345353a9266a91199527545c9ba3a35e2e1469aa9f35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111637 Malicious code in academic_snail_maroon-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3e56af095f82489f9f327d5e234a74ecb05687f8ba20f173977d6a33593ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112443 Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112134 Malicious code in nosy_mouse_blush-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efd21dc1a9eba32754e5f1f3f626045dc9bf70e61c27ee1f734dec5795fb55f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112174 Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111960 Malicious code in grubby_ermine_white-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088e93156cdef879fc1e99d71dd4f0da07104d59512f47fe3ce97f5e74377220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112012 Malicious code in independent_grasshopper_indigo-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f377fe45f92e0011861e8271a0d450b1aef5b27fe68b0bbca84102c12f96cf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112168 Malicious code in pale_impala_emerald-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 183beafea30c0e2e82f4a7fbddeb891effa73d7cf9f60721e7d9df081c006f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111897 Malicious code in few_ox_fuchsia-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010b6b8e9da2794fbbf7c5ffb868eb93def9e759310026724bec71ca7a5aace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111865 Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_marlin_blue-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd7458ebdda2cf6e94c7b1588d2cea8966b00aad8ad0cb4c3e6abcbb7bb37ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_hedgehog_pink-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8baae7b99665ba4b4fc152fcdaec74dc2400b08949bf32a4c6b1c1ca3b66b42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_parrotfish_blush-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd87f9722822c9baa36fd295bd8b567989b8461ff417d7659dde41aee9f5e513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...