MAL-2025-138676 Malicious code in eager-maroon-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a1982979ddc936cbd99a251a684b4680881a06ad90f821d1ab7caef576ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-olive-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881decd5f2d5a8e3639665520cca8495ff5fd66a9d7e634181d480ff32a518b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible-aquamarine-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986da177a3fb6e4cf6279a045c7ddd48d4d2487ed554f3de7722576181baf393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable-plum-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a894703ee849bb67c5b9e8c54abe66797e0f3ee6b9e34ff534a946b2aa758ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key-salmon-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed91ea073b631832261ecd74883598b43d4f979812b74e96809f01eb6064910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-aqua-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7228b48ce2323d35a74614638bf6644a42e50e30c25160d5b32a179f4073a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned-turquoise-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c079c1997c7efb62118230f56ece83a39a085f88bd3f0593d50f394de802a7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-violet-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b161098efcce9bbab3900cbbd45afd31db2878b3331e7d6e1d1cc130e0392cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-bronze-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eba78c701c91e88fce0d28506d839c47d359be22863e170d20f40a50262e76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138884 Malicious code in mysterious-white-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d143c2eca61ce2e0df04e00bcc7451f2ed06ad462a352ff7a319eb1195c22ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138866 Malicious code in mean-salmon-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19747e08beef00c0ff50ae824663ccc2a186e08cef376c9a8b33a9708d7b2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-tomato-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2462fd88d4f1162ad5132b0522ddf2ef308fc517f82d6c57d133033fe46983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139019 Malicious code in solid-coral-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da68fdfb4d7b9042f7bd29b67cf97804a03a65a7a3aa6f4978362b59158a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139032 Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...