MAL-2025-139158 Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign-apricot-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e13b73ccb7939868638c754e96a2bab2251c389df73460c35f160206b58c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139098 Malicious code in very-bronze-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a26f5a63cdddbb9a5eb0e186b99713720a3399c3998db04cd9409bf6ea2521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138622 Malicious code in combative-crimson-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20d6db67477fcb5b1856681f899c65c487c208feab659f676f57c06e0c1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138582 Malicious code in adverse-amethyst-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0185f3b42cf01537858dfd8c5af427b2d70c3bdf8b3567d40f3106e37fdb5037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138585 Malicious code in agreeable-pink-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975f42095004558e2c264eef50b6062220d338eefbc544e78141142bf6a25787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138771 Malicious code in helpful-indigo-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073b7059a8d0026ccd0785079c933b238dfee08450669c873740d576b04c2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca62840302d8b082c4b5224813d1925b967016a33bfef4df1f915977bc494c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-mangut72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531616d95a17a4b623739f6c32ee3e6d0cb1fccff1d9f4ab3152eba4faf6094c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tumis97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc3c96cca870361f2e522f3bec9db4ece2cd70b818c499816d89d3667f99529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-telur98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f772091fd6554c09e83d5aca81dac0829449d318afa6404a027f9ab6b7c0d40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-mendut11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fbcac09d2fedc6c0f4b461bdd6c19904cc106692e484e19c77dc0422192cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-semur46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160d63427703c79b052f4b8cc577e417d4923f29bcd020420db7db48ccb7622f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-lumpur66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e845c832598994943073dc91e41bec003c79e9998d9519534f3543313404534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da662512703584192522551ffd13afb6f0b24598dc369dbc9e3fffe4c308468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-bakwan80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6188a7e03c6629232c5c2eed06ac74247e8166254dc9a566d7e0bc18814e5edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-enting57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 712fe9b5d9e426611ea29626a79e123f3f329fcc5d1c884c6438242fca7a8aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...