MAL-2025-112038 Malicious code in irrelevant_cheetah_violet-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dbb3b0e6d4178b84e656ed7feef54701f5a1998befa86fa6d1505bf3fc1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111800 Malicious code in depressed_dove_green-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09485d9e4823bd203eec0f54596f869da85dd7cb5d2a2570b710e64c5929f649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111709 Malicious code in bumpy_xerinae_cyan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcbf681be54e4781717458bd162e879feb22b7c6d99524bd5caca2429a28346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_hummingbird_jade-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f703dff488f3777f32e67c635fe4c6d4a9393e00c0cd47671332ee5ba9d77c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_pigeon_fuchsia-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96271f3dc2683a0e062c9a0707d5c7ebb499a0456fbd073a9bdf1d71a6127856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occasional_ocelot_emerald-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ad13c006fe70fed5e3a1cb24bba33f3ae56f554702aeace847c08bc0291d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_swordtail_green-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d7c157699bd59b73f51e319dd87b4f6cec12d26bb554e9e2d37f474e0375db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_goldfish_tan-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39cbf1d50435e7fee81c2433bc1d0029b7b2a6fda2701085687363610fea5a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_angelfish_gray-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab6b718eaba6b22579ac5a6971a4171ed71cf56a2b7d0fcc4e6ca287c0d0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_crow_pink-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfab701ce34d98bb620d9d54877c35961131fd97559d213352575ac37257eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112251 Malicious code in reliable_ape_emerald-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627cfeb1be3681c782f534c8cecb45047b3a58f2f2ef7654664aac2f93fc32e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112395 Malicious code in thin_caribou_olive-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350debf897f6f0905dddea249b2931264a05934caf4935f2ff2d1e07abbcea05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112384 Malicious code in tasteless_possum_silver-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0821389ab1b0a49ca07288e2d54e38ebb5fbf54d3e4b1de8690bda769f8d34c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111810 Malicious code in dirty_marsupial_peach-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5345325f6128790e22f5ad327f3bd612eeb346c4ec1c6e016066d2b5010a51ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_xerinae_cyan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcbf681be54e4781717458bd162e879feb22b7c6d99524bd5caca2429a28346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stupid_hippopotamus_tan-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce76b3cf300cf6ad1fd9ada5fadd8f424bbca6cde1cd62dd0a053d543b66664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_sparrow_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b599412a0df4cbaab8dd4a2aeb0b7e37f0333f5aa6a329f960c5726d93fc42bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_mackerel_salmon-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5081bad2d42d6492c64ceae912970562036c47b4a4a997cab28a65812fce5614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_lark_crimson-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480b467444e81b1025486fa2cab9040661181ec7446c8f2881993075e33d2fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thundering_koi_olive-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc69d95414b0b1268523fa063a0b64702968cb01619c004e9f6c85b2473dcbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...