MAL-2025-139058 Malicious code in surrounding-plum-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5902a9b7554786612aecb5e4427670d316d9ec3193d84b1316cb54f8b9782d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138806 Malicious code in insufficient-plum-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 665afb222b38618c8fb7fc4731102637f58abdee132b4300f3001985c74f12e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138674 Malicious code in dying-fuchsia-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aeb0a445c330a06b46a7c6edd20d25d8d0d00d22f1f675e959b9aeebdbd67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138703 Malicious code in existing-cyan-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1633ea59d481983ee376978a6a2a319ef27e6a0879ca09fe7a81cb5c45902ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138754 Malicious code in gleaming-chocolate-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cd5d3413a83d04a7ccf20e9d34dc63a03c2de5a34edf13653e6ee8d9d2f338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138925 Malicious code in parental-orange-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf2b1c7d4574027372c96a9437db17e6ef6312dbd95da41de26523fa4393250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138588 Malicious code in anxious-rose-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f59d8250c9e343d308c72f588e6a26df9178f99395152d436e9fb719807b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 937baec00ac8f0904a27fcc57288a2842d8ae07618857a3812c607570368d851 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable-olive-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b584a7dd32122542a704ecc8eef1b178fee04df2fbdc39fdf5de20861c63543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy-silver-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed825045165dc249d9342dc368258f6d714bcc564f49b26d0e90bd3529fa306e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other-plum-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f22d4dfabd1b17b29347535e2202b029bac2ea771ee985aa606bb72b249154f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-chocolate-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c29dc28c671c0f42a9b1ab5f6ff9d4be82161b6e143a22c86a209b9d427884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight-maroon-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c6f60bd1be514764aea67ad6dbcb85bc59aece88d94c8415e0ed359100ccae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-coffee-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65ef4b71f6b9c8b9346c018eb051bbca8100e0347f5f02ed86c6bcc4e308c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-orange-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ef8856f41d66e8d2bfd6b417060f717f920ce163201c6db6b71acdd9ab6f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remyd7fh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501fed8bec0c67578f202a34095b9bcc3cbae44eaa54aec08cde62f287e21757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c94ea4747f8fb2dd59ebc025790319974d67919d0575a61923400debc771201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138964 Malicious code in rapid-turquoise-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f200365c9f71994dbc02253eea8ba63182e43b73b5ffa0c9fbd44cd1b34364fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139061 Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...