MAL-2025-112316 Malicious code in slim_crane_apricot-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433573128dfd794af420ff91d9d169be45c7714bf0feb80944a3bbaca465137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111723 Malicious code in chubby_earwig_jade-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ec82bc50f662554549e87b96539d007d2db1971a5c007001a2e65ec4fd4fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_worm_aquamarine-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16261f0ee471a3bd1732609e5b854661a46a60253ea8d0687ebd9ddb2181ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111678 Malicious code in available_grasshopper_cyan-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7763f01856823307f8cd2575506b52234f2b67b5a6e5a5f52f129763b8fb720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111832 Malicious code in dutch_meerkat_amber-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90488e88f739b4039254d196e32e421d886cab3a6ba3653257880cf78da5416f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112196 Malicious code in possible_bass_moccasin-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccb168a836db634f54e941d3752cc103240499dd5c37601eabf2c9d303f3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111838 Malicious code in easy_otter_salmon-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4a824fbb1b4912038f5f5e8879cebc8852a3e9aa1962304789521a63646e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_zebra_turquoise-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7afd9cd69208f6ad3925a63a3dfa39b73a4b0977fed185848faf95cb66428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_gibbon_magenta-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9ea38eb11354688ab7e9c4927515e57634feef2abefa62c12add5bd15173ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formal_crow_pink-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfab701ce34d98bb620d9d54877c35961131fd97559d213352575ac37257eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_tuna_fuchsia-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac109c05def627fcc7cc22e5e0d9307c15160dce30afa6a13f42500a0de3a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_swordtail_green-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d7c157699bd59b73f51e319dd87b4f6cec12d26bb554e9e2d37f474e0375db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_whippet_bronze-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5f75e7257f9258c99387f5044e6144cc690e3970a02e26cff524a417408aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_fox_green-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52f64c51ff8462a46929f90a42934827224162e451bcd1717f2279ab3f3e843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_cardinal_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ad9292d76d78f6f94561907654f1dcbed93efad692693eb6602da7b66d3bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_heron_azure-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5227543fd581a3c36d3fcd61a4859f4d00ad5b0e8aaa68a760cc3e6a127d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing_landfowl_lavender-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a876f62755a44017f9c2d25c82ec04d0927b01ad9b22c6f7d2c32396804db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_cricket_lavender-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76e4a70d6ab7967fb97a0f1139e6f9b5a4b930871f5a6ef80f4c80b8ce2f98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_peafowl_rose-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e4126b1e75b649cac19edd21ba9c8b090ebb9c642480b227dffe19d4a3ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112331 Malicious code in sorry_buzzard_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab8442ed09033ce6ad2c2cab451d7c3a89c72859abd38615db3884d82be2e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...