MAL-2025-138714 Malicious code in fantastic-copper-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f080f14db157fcd872069aa7162d09d6203c38cdbc56d3f1455484784b8183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139078 Malicious code in tight-apricot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313adfe19a1739710ac40ad1d8d6f8cbbc5926b0f0885edbf374379c5f5cfd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138770 Malicious code in heavy-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e0c8927e1efcec41bbca952ec4d9bfe454a025ceecad348420ebe101bf4a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-amber-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3b81d04b3eec8d7f7df1055c5e60213c983872f9d7c77f0b56a5b93294253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138862 Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139015 Malicious code in smart-tan-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6346393ce37cb8b00d5201fae5e8b195ce2de523c7d24b265a68e3f23021174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138933 Malicious code in personal-jade-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77fd24d5d04814d0339e97be48906769d7751a0cd15f4eef9bac8dbc69c672c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138981 Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138835 Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138834 Malicious code in liberal-maroon-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404408d04ed10418987628cff8ad2db7384bf492d2deb3dbc9c014d9d6306348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138782 Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate-moccasin-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51838c4420bbc425598253239486823d2251e8299ee48b3f77ee8de03b2557e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-brown-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyonga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89509b102cedd27f8218e09a3d8eed64cd86ca9a485d41d9c8eb426dd82e179e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever-gold-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a98a2b6918c5f0eb5343a6c74c474ed9140c1e3673674306de71f0151d1902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-teal-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ac3cb5d867a1c5335e2448f597f0c48d03822b24c98e92b0d7bc9a50430d40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...