MAL-2025-100404 Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105337 Malicious code in loud_snake_lavender-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a0153304f61360dd14bd5dde548863bd0b8ef2c1a85941769b2a0aed7196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_gorilla_cyan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb54fe60ecc7e1369fce16747a2847ec7c33ec12324e45a00b614a0b1d0445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_coral_violet-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dea8b000294997accba12e9b3e5432f5c7ce269356f51659442e96092ec85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108398 Malicious code in satisfied_carp_amaranth-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54afec9d4235bda1c1c969f29d9d7f09ce7b840a90b39b99109b4c662abf9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107330 Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102333 Malicious code in excited_clam_blue-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b7f2bfbc17b4ca886890418a077adce8358bc02dd446a24469f34e7e3830e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107663 Malicious code in quiet_marlin_gray-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390ed3afe73d2d003048efcd31aa77dbcccfce07696a4e12041ea457b0d4599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_deer_beige-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae98f2f41db2a700a50285d122024b98b93964c65a640dea92ecd97365d530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_llama_azure-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f14262e63c83046e5aa93afe0a9a942de19700e30656582cb7691cfcb968e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102855 Malicious code in fond_tiglon_plum-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce0142fcb35cdc7bdb33e4485e81ce44804508b66be0273f22e4c25a2d69c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109629 Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0db57b0580b850f65852b109d1d841989305efd79524f60c98250aef8549d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cc79e1837f38e2c58edcfda9dcc1f82424450b17f05d531e64d7de962adbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a08ea94822eb28a4d54e605c87bd0065ffb3d94f4e1b10935fdff8469153d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b45ec0b9b47a455b79d075a6abb17bb469dbc3e3491d9d9a68f0f227abf8c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90ca91a1a5b313d46ff1a8926a8a5407252854f38e7ac5e2d984d9b13f5f3359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6098971a362c366fe198437b503467e0321533bf51f2448a6944b8eb634c2b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0618722677aea10cea078fcd9a7e1194e231ed6c0f57933dc0fc68fdaf15dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...