MAL-2025-103087 Malicious code in genetic_lizard_salmon-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438f67656376de01336024500f833edaf005d6e0788cef920ff2dca0d9edbdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creative_boa_jade-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f27095f55d5f6879dcbebf5a717faafdbd92bcc4af9d257d94c6f113f4907b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_sole_purple-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22eadf7a1adf8d7167b9f2f589f0aba5890e6960943891077f2ebf1984953338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky_chickadee_crimson-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac683576125faad821d6328f7fd2ef518655a677c23fa0e09eb8353a65aa234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100022 Malicious code in bloody_peacock_aquamarine-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12949e6e7f85fb88375584bd7ddaa4f335f1238ec4feb70e09c5ae01fa086463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104560 Malicious code in jittery_worm_cyan-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db1ce0f53915dd0b34fd5faff28382624a23aad6413ae6e01bbf991789de71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111330 Malicious code in youngest_leopard_gray-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7724513cafee88379a7163b0e165ff5ba8a172c9179c4097e65d70fe33e45e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105753 Malicious code in mechanical_tortoise_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8beee9ecae73a75d8f251ab42615fa56c01e96bfa30e8d5d823c84493498220a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107314 Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103751 Malicious code in holy_crane_magenta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dba140b3a88f7277900b6fbdb053e653ad5529aca1c45a4d0fb0956efd7f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107406 Malicious code in psychiatric_turtle_brown-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcd21823ed0a8e3e051c0721eb6af0ad4173e187330613884b6d0a4f2671e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41643f74d4c3019c688fbc618abdf84bc9f91d6b2cd184537e00e810a944684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2cc09020e6f69db7a51b7d370d041526fb09c0ec90cf2e91000849acbe268e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c548b3ff93f7da89e190dbd03fc099e9891075f4d05f8fca925adb6ae2f3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7561e85aef7ba27e95cb9797b3a4bd951013fbc632ec3c95ff2fbe073c5b1ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df20520ba5f4bb0bbb99d26e2de58cd65c5a2b8f9159e71ad23bdb4ae7b617b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ffe0bdd52550aa550744f08b70681cbeb2ae587720ae39ef9630a8bde53248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dcb2485569d4c04829b3b9c04d22d43e7fba52575e1cd394b7e31b79cc604f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ca62819839f9361e30423f687c2b377bf18bb598f77ba9e867765dba88f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...