MAL-2025-111637 Malicious code in academic_snail_maroon-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3e56af095f82489f9f327d5e234a74ecb05687f8ba20f173977d6a33593ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111865 Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112443 Malicious code in varying_sawfish_white-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72ed15740011ce0a58f187d91ac0ec62c607303cb08bd3169f88db84fbf0958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112363 Malicious code in stupid_hippopotamus_tan-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce76b3cf300cf6ad1fd9ada5fadd8f424bbca6cde1cd62dd0a053d543b66664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112432 Malicious code in unnecessary_wildcat_coral-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c851b0c9b4f399b7c3959b32879358a3fd992ee1ea08ef7912fbaff57ff9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112247 Malicious code in registered_turkey_rose-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e2e3e0ea54e220fee3c431fb4d26be007a01d5ce383b8904826e4531a2678a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112012 Malicious code in independent_grasshopper_indigo-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f377fe45f92e0011861e8271a0d450b1aef5b27fe68b0bbca84102c12f96cf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112134 Malicious code in nosy_mouse_blush-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efd21dc1a9eba32754e5f1f3f626045dc9bf70e61c27ee1f734dec5795fb55f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112058 Malicious code in level_aardvark_black-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f88a9b1bc10b9b2b98519ed5474fb7285af97c05e95a2dbd8e320bee7c827e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_chickadee_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5581eecab474db1dc14bb275adae5ec01a9dc0af86d6a4bb0e3961ae2d9591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_porcupine_azure-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70fe00fc0052a267f1a942766ff8997b2ad431252813589ab2da648a8ee18f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_turkey_maroon-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f657d4b2f6b807dc3d7f1ee17005fac35f9a4783aa4978cf63899631d9c300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_reptile_tomato-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b8369c5d8993c5d4b8453beac5b27a13ae2da2e8bba51944a13bb0dce5f1a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_haddock_turquoise-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bdf3db229347b595f8581cf29c0ea772347f2a2169206f07c462cf1c9001c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_parrotfish_blush-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd87f9722822c9baa36fd295bd8b567989b8461ff417d7659dde41aee9f5e513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_mite_rose-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1367cb82207fe9d648580a07a8d80b163d73ba40aed05e508e79d577d7d4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_hedgehog_pink-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8baae7b99665ba4b4fc152fcdaec74dc2400b08949bf32a4c6b1c1ca3b66b42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_tiger_blue-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd79244402cef83abf7c7b5d3635558d6b2fb3b096d1b8d9c559c9de6dd968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_sawfish_rose-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcea479ab30c8d155150648815e3f6eb6221f5ea083dcb74945c4183fed3c52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112158 Malicious code in orthodox_coral_yellow-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6c552f53e5f1b7aa542a7adc1d0141dcf9dbae7af1b4e034a39fe97e58c376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...