MAL-2025-138851 Malicious code in lucky7776329 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c92c8f08edae8528d35b61c2534dae4487c2a062d37869ed4b082ccbc1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean-peach-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f0eb8e7ff15d8e0b06a0bee607b728ac17fc1c07735ace0058a7f88a933806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole-white-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e709f6ad7403eb48939931742b4a4b1e9e734e09eacab6d321e561d29816952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-salmon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a442488ef5caabca8bae9b82d2a185abf2102a99144d9978ab6d56435bbfa3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139018 Malicious code in sole-white-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e709f6ad7403eb48939931742b4a4b1e9e734e09eacab6d321e561d29816952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138840 Malicious code in live-emerald-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cb2a4fe3d628a62a93d72bdcb2d5e969c458ad330d00905c65783a5a5e14d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138773 Malicious code in hissing-moccasin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdc8cf54d1a0f4d631242c472458584cd3c8a458610f8062f1d9c0d2d221046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139104 Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5c16558a076087c67c07733dd5d026ae9d399fad0f129b20f1455d41212350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138935 Malicious code in pleased-chocolate-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874f1b9f8cd09a7220d567788a1aaf7dcc14772d94267485dc88dd46f55a08c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-amber-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3777e6fdc1b4b372b8acf2210560d06c2431a200391f6c4512d754ff09902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-gray-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c32a771f61d8884dd839eb457a9126fe4d205325bf194b113122900c6b8a5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant-jade-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2bc1fe0efb377fe5fc0af8141ff8658b9d9ff3a6bb2392dc1f008206ae9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming-lime-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a0d2ce3084630b8aaaaa2ccee23d64366e300c6bde289088f5d116c6e2e395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138608 Malicious code in chemical-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843e469f42d82876902aa71724ad51d64fbf66e28c4d288a53478f1fd1746313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139058 Malicious code in surrounding-plum-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5902a9b7554786612aecb5e4427670d316d9ec3193d84b1316cb54f8b9782d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...