MAL-2025-138664 Malicious code in dominant-plum-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae52cfb25a9af9c388c4e718280853f0a3261a39fb8fcac1de8ae77f8340cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139011 Malicious code in sleepy-coral-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6aa97bd2e151bacb79b96414ee5f8a710a91208bc49c16b8e842ea40b7a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139106 Malicious code in voiceless-white-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f7f9174de86f57f60186b94ec084506aecdba7fd0c254523d7d5ae231a821e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in royal-beige-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b5851dacf23aa7952819d3faba5c101e042512f09bd607d2e86d9502b15d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b64e4a56a725b2726b1b2ca6dbf6ccc1754bd55922937806bafbfc7344cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138796 Malicious code in inclined-black-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2705f85a0fcd905ce8ec3ebbe31f26515bd3c273b66f274be5b8879b3bfde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139119 Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138711 Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138991 Malicious code in santuyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be22e0228ececf4b955da10274b9cf713201fa8044783db3b90cbcf2930e8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138605 Malicious code in cheap-cyan-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db7c5889328660f36965d0228ec4363d33ebd3da5ec1550334b53a3a99b9e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138880 Malicious code in moral-beige-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec323bc8a8adc02eee0dffd7d5a36902539afeb9147920b242298f172f696fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138943 Malicious code in profound-amethyst-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34997eb623cf6eef95f9f3d394b5371c20678787484f9a0a028a537888cb1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mangga21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32ce9ee63733519987f067ed739e907a833cdfbcdcf2c70f9d1b48eb8c820778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8345cde6cd654f10d4f3ed9d81f06204174699043e4921368007c0a1df624a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-bubursumsum54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4dddcc0d0c93eb0e1e3e0be7b5bb17cce2b7c8e249e0f31287064c78bafa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...