MAL-2025-117237 Malicious code in subsequent_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80df39499f3e2974a2d5a6a31aa9917ce6114f6dfe03e321291503618b45cfb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113487 Malicious code in doubtful_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0a4817e379fc71b96cbeb9f202bc47b2b8f523ef2301efbd22c7137b9f795b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112676 Malicious code in andi-tempe62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4440134e56c08dd2b1cf6361fea273870c266c42f11745c1faac4654721fd07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong_mastodon_indigo-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996ad74b5480c0a105518c989b15a9eb8903e4c49b74dc27eba64c9c9d8c0218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_ape_aquamarine-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa9041f185d1b2bc827305eb9b8878554964c927f46f25ce188b63965d50db9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hoverfly_plum-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138e4760625e9c7196231528feb3d0cd6eebc18cc3d61035434b17ec012680c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111857 Malicious code in encouraging_iguana_coral-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec2f71c169a1864f5dac3af1e05d3902760e59ec9f44610f9867051944db9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112372 Malicious code in supreme_python_chocolate-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee78c995339138ef16f17c91857cf04ae02c7538a9215e8aab2b74a069b2631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111701 Malicious code in brainy_ladybug_plum-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5dae712d3bf26888aae3c812ca5426c1a35b7eb290a7d8e2524d4ef2bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111786 Malicious code in dark_chinchilla_indigo-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112280 Malicious code in secure_lemming_fuchsia-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790d8683220fb28b0e3e96c888b4d6a27296d9e76113a93365f3700d236434a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111654 Malicious code in alright_goose_beige-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829b8a132af63b54486dc6085ccde17834b17ff6cc9611c6126d9535a856167a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112275 Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_limpet_indigo-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec64c574ca9722c10af253fb443d49aa98060563b3233d47cbf2f9506324fecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_cod_fuchsia-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400615dabde579335ba4490cfa410c47d970407d9ad7bfb878a14a19b37df938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_silkworm_azure-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e88d6d2ffad0efecd35bd1facca4c7dfb61eba297b687dbf9c3687cc54856ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_mole_scarlet-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a023b13ca7d40a8605711d8c5d30f7a251e3b646151dc324109c5b16e61b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_pike_scarlet-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d84f6eb721ca6233034165fe248b9f113cbfa4cc9541cc9bedea9bc94b03c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_vicuna_ivory-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb22cfd6cfc7db74fbdf26d634f8b6c6778667162ab87e09073a11ae858c03c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_cobra_azure-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db90cf908fed146e0e48893e965d05224ec1c9b88648074dc502184c049d7560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...