MAL-2025-146239 Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70a40f34ac270e32d345abe4cf6f6faeffad82b24fe6c6f9731a29532fcad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139150 Malicious code in odd_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac14b7c26392d5bad1679af65d7a95c7e05731610ca16abd7d89f48b52250ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139144 Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139143 Malicious code in institutional_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd3847a19c1abe1d8b37ea10cc7abe6accc274692295399abd67bd4979c6270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-jade-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68604dd963ae18ba2aabf6cd072036bb3fcdd5a087756f0902a02d96c1967bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-maroon-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25b1d74b0fe2abbb639904a901d5664905bbf7a4f235ae76bf26e9e90272641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid-maroon-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229582b5999f79aa7d666c6749ae9c69842cbe99816541e3596a10f1c3da3e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional-magenta-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60562508b9a49e5183b75a047f8b6573c505c8021b6deb45a24ed8ee42eeca28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated-scarlet-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f24cd3dd435343e76ec112d3efe80511dfb055ef85cbcabb881fbc87154463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative-lavender-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec72f5bfba30e96c51554845c6a26c1f998f5349a550828d2379a1dbe7b91675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond-copper-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679bc3f0be0d096c7197b95397a01d24f75767f4a40dd4f33a5d2d564a929856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective-indigo-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615170e63c85a8c696264d65ce77a67dc95e4cc3fe9d79788c1bc5b8e65950d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt-teal-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f124b2b9ae4a334e270a929e075ffe74689941d78356cfb0a02d6c2b73f918a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-salmon-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e57daa4a91a59fab1e0c4ecf22166834d63f9558ac43438608aece819a60183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty-green-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235b2d0ae78ab8ad8a86f5f1b00a821d6d7696dfa134f0f972d25217e09c3d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...