MAL-2025-138629 Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy-red-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136a6c89f41ffb43e3480e9e135af5adb06770bf847e4378bda22bebd5a66d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139104 Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138604 Malicious code in central-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-purple-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88da381262350f4dcce284e6843b6eaddf3a9a5e651dcb0e597d9b86213bb3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-salmon-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed91ea073b631832261ecd74883598b43d4f979812b74e96809f01eb6064910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-black-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138766 Malicious code in handicapped-crimson-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6958348d2e05f511c65da6531babfbfdfc8f5799f38521d39d65710a18f3b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139070 Malicious code in tharkunad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f4cd45f426ebc0adc00027e3cad2b3ec913517f82ba22215ed47354d7c1a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139112 Malicious code in wicked-red-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889f681a3b15c54b0b220cf724a3642aca92386fe45e72d8677e5bbb23909ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in far-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c965672f482780685fcb3533f0acd0769416f4c3afc12bb4d9cbb5d910221e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138973 Malicious code in reliable-sapphire-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d415cdb3b27d3a025bec726f6bb6bf6c68fa1d5b0a883b2f8f947f9ee180e061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138634 Malicious code in conventional-magenta-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60562508b9a49e5183b75a047f8b6573c505c8021b6deb45a24ed8ee42eeca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138628 Malicious code in concerned-purple-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b137d122756efdf5afc73f3f7eb9c119ac13614e4a434b7ca2ecfa3435b02100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-harlequin-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact-salmon-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7044b40d221b50f9cb6b01adeb01cb8e2115df9a991d7040b6ca26a60e4eb610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...