MAL-2025-111966 Malicious code in hard_camel_scarlet-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9fae818680a42309ebd6e7b7594c088d14c35347f727bbf1827211fd7220d6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111932 Malicious code in future_deer_aquamarine-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5aca048db283ba6f0477ee78ef377f0b176bc855f913423e78cb5b859bda6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112180 Malicious code in peculiar_crocodile_scarlet-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eae2b9c144861654df04ecbcbe1fc6191721c7ff9ce0c8f8de00a9698a24a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111635 Malicious code in absent_junglefowl_emerald-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55806aaa20ca701d710d20082374411b412e40cc3dd1db7136c0a34ba3419b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112490 Malicious code in youngest_python_aqua-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480651272ae95097f396981d55721539854b36f387c428afe6b92e7ce85aec23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless_bass_pink-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f14a60ca9da66b52c180add195106c88c86a95522776319da15f36d67fc32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_monkey_maroon-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9614bd5755d2f0e8c23fd4dd3887b01f620172d16ecfb895eb14266748f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_stoat_amethyst-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9654c763cad68cdc5381691976c9da88d614b9b1210cc2bf0436ff23034aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_sawfish_blush-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146925d01ceb9c7866c0d8583ba28de71917c40669bb29b6a65ef23c60d16d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourable_swordfish_gold-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9f1f9e843dda8cf1267324b29ada6688db5fcf5451d9dc6b67ad49218122b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_mollusk_maroon-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689f12f13e942114d7205e63f9121268d11de0bd26ba933f500d0d56ceeb9844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112057 Malicious code in lesser_dormouse_maroon-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be8e630897ef315bd1fd02b39eddcd2d4ed09fdbece33be6093bb84c5543006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_walrus_lime-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c122efc7ac8aac6e14905808c3f1df67cd5d2d8081aa901339c4b5cbcb278bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_takin_aquamarine-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f63e32b0dcdd828067761c5d2fdb017777782b5a9623eca9c2bfde487819f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112151 Malicious code in opposite_guppy_silver-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c39ead040d48951309e5d19660e9a7a58f4e8bb7e8e139fc813562cabce41a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112263 Malicious code in roasted_rabbit_brown-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67266a37d0cab164d86dc4379edd93a92bb3b5ce2287af256b601953d5f2c06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111990 Malicious code in huge_piranha_white-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9956c57c0a5da66e403032e9d865038392e741ef7f23b5509230fead69cd306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112414 Malicious code in unaware_ocelot_teal-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba2902102cbcff0eef6cab9aa471913a72e09cb38b81977bfe56301782b10ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...