MAL-2025-142960 Malicious code in google-hermes-telesto-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583eed0b0920ff215525064915600ba5db9ac1537af94ba4462d0043514e7c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147801 Malicious code in selenium-cordelia-remark-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78d69895638b3256becdf9e96956dde010d6df9f3b7e9db4f285cc7873ba6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149718 Malicious code in xerxes-sagitta-inquirer-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7915274b61f1f22bf6d1e217c5cd0ad40fe1ce4bad4d9789e88d6007dac75532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical-ivory-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9801c2eae353d37f40917575b5baa1b0aa044d12e673eb47365b7e0ad2d5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138826 Malicious code in known-green-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ea21280e0ddb21957b7e41e5deb88d67447b8bbea9ad0752123e40a897d3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138591 Malicious code in available-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e82c53a08ceb07cc6658c93d6ca369aef45a2d9d415128867630a8c4eeeae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun-coffee-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9293f754899af91b97054d6cd10012bfe309ed9d770febc6f6dc038211f422cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-white-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81dd3f6a1c64968e6d832222379c22d81a0d68cdbb8d92aee62cd51375d7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138865 Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138735 Malicious code in frantic-jade-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871ff4bf7f1912c86b6eea0dbb591b4c79ddc2d597214547be64a5fd0178ec17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138621 Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139068 Malicious code in temporary-indigo-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64749bbe5ce51de06bcc62324c7d1a555e91365d0f78c8b27652fc2ae5972044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious-lime-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af506b719f193f812c11d1cbdb9f070c854998223399bce8da84cc45a79d2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-white-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d143c2eca61ce2e0df04e00bcc7451f2ed06ad462a352ff7a319eb1195c22ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138726 Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138906 Malicious code in occupational-amaranth-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dac78f5970a488917285472c72c67ff53a0c90384e403cb076c30578a0e865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jamblang84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e38ecdcdc75779aa7f819fe44cc1e9aadd6fbb53993871d6949dd8f78166fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rojak14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a7d3b129b1e0a21975fe834af3e29be7aa4d03765b11962f59562b0333d32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sasag6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7441c1879c727ecda59424381468efa2fd790ccf3830d4ed9e4fba0dfbcc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...