MAL-2025-105337 Malicious code in loud_snake_lavender-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a0153304f61360dd14bd5dde548863bd0b8ef2c1a85941769b2a0aed7196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100404 Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102333 Malicious code in excited_clam_blue-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b7f2bfbc17b4ca886890418a077adce8358bc02dd446a24469f34e7e3830e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107330 Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108398 Malicious code in satisfied_carp_amaranth-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b54afec9d4235bda1c1c969f29d9d7f09ce7b840a90b39b99109b4c662abf9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_gorilla_cyan-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb54fe60ecc7e1369fce16747a2847ec7c33ec12324e45a00b614a0b1d0445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_coral_violet-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86dea8b000294997accba12e9b3e5432f5c7ce269356f51659442e96092ec85a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_caterpillar_amethyst-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ed330a1bc3a12b700c5903bd85258e82da4923d5909f184aa04ed76d19268b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107663 Malicious code in quiet_marlin_gray-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4390ed3afe73d2d003048efcd31aa77dbcccfce07696a4e12041ea457b0d4599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_deer_beige-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae98f2f41db2a700a50285d122024b98b93964c65a640dea92ecd97365d530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109629 Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unexpected_llama_azure-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f14262e63c83046e5aa93afe0a9a942de19700e30656582cb7691cfcb968e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102855 Malicious code in fond_tiglon_plum-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce0142fcb35cdc7bdb33e4485e81ce44804508b66be0273f22e4c25a2d69c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65d796a001cf9982a34a8e0521e46f123411390a451bc2043d93b6ddf15d81f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16544210925c07386c0bfa14e2f58e31f74a0f6917d014c9f6f40c8541fafb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa4c8c1c75fbb6d78b6ff36ebe3d330ae03debc4978f8639cfb7c99a5d3c9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb38e071f8053a73eb6770eb4b3949ad1641d6651d0b4b174a0d9909d1abac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b0737b3bec0753bd5806b7cbb13389ef56cd4a137501faba2f08c79c54174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03a9bc937297f6960ac4c3162b1131e68ca2297e34cd6a01bf4a73740344c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adf00a281321d10702ec9729e71843eabe528d2290a2d27fc86cdc79a9028cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...