MAL-2025-100404 Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105337 Malicious code in loud_snake_lavender-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a0153304f61360dd14bd5dde548863bd0b8ef2c1a85941769b2a0aed7196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_gorilla_cyan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb54fe60ecc7e1369fce16747a2847ec7c33ec12324e45a00b614a0b1d0445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_coral_violet-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dea8b000294997accba12e9b3e5432f5c7ce269356f51659442e96092ec85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107330 Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107663 Malicious code in quiet_marlin_gray-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390ed3afe73d2d003048efcd31aa77dbcccfce07696a4e12041ea457b0d4599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102333 Malicious code in excited_clam_blue-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b7f2bfbc17b4ca886890418a077adce8358bc02dd446a24469f34e7e3830e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108398 Malicious code in satisfied_carp_amaranth-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54afec9d4235bda1c1c969f29d9d7f09ce7b840a90b39b99109b4c662abf9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109629 Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_deer_beige-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae98f2f41db2a700a50285d122024b98b93964c65a640dea92ecd97365d530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_llama_azure-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f14262e63c83046e5aa93afe0a9a942de19700e30656582cb7691cfcb968e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102855 Malicious code in fond_tiglon_plum-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce0142fcb35cdc7bdb33e4485e81ce44804508b66be0273f22e4c25a2d69c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adf00a281321d10702ec9729e71843eabe528d2290a2d27fc86cdc79a9028cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b90795bc02cf3bf3528d35a34cd883f22884351868daac35774cc460bceb3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breezy_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6f3ec6fb4eae7e1d24aba7e1201eb5948ae204d3eebbeeb43ef6495fa39184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b0737b3bec0753bd5806b7cbb13389ef56cd4a137501faba2f08c79c54174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6098971a362c366fe198437b503467e0321533bf51f2448a6944b8eb634c2b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cc79e1837f38e2c58edcfda9dcc1f82424450b17f05d531e64d7de962adbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2785a036125bb146187d9cc509a16de74a52c3ef238f75c427df1f794edfdac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...