MAL-2025-138875 Malicious code in minor-fuchsia-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ce63415662725c0c3620992b4fbb30a54971d88e2d592defa0964d84f727e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138754 Malicious code in gleaming-chocolate-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cd5d3413a83d04a7ccf20e9d34dc63a03c2de5a34edf13653e6ee8d9d2f338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138936 Malicious code in poor-sapphire-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee162fd526da4df56d69f605301ea0857b0794c46bb6f558559941d8ed7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138751 Malicious code in glamorous-chocolate-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c0d5cce03a0fe67643e84426006c83c80e17073c42179db9bb43dffcd086dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139094 Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138895 Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138705 Malicious code in expensive-sapphire-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8705622d2e95c427d985ce2f0095e7f02ba8db307ea6fd6f933ffefc6b1dcbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138972 Malicious code in relative-lime-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0572147dd9d662ad4edc78ec7b74de29756babc7d0819322f02adb3227566f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138612 Malicious code in clever-gold-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a98a2b6918c5f0eb5343a6c74c474ed9140c1e3673674306de71f0151d1902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139042 Malicious code in sticky-blush-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebcbe8f2544cb864a3dced0d0f57cc2d8d5027b806ce8b1d990c962276dab17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-cyan-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19fbb2801752b03d483f9540b0ce95aa3b83204d042ccf9d3da684df398a418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-lime-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34414b15538fbb33304a63a783bf9b4bdb074b3309d03ff4a3776077a3f5758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-salmon-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42648f11db276a954142308546267284bec5c46fed58fc79193a30dae30dcbc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-purple-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d4b82bd4a4f085bd2bbe4a81e4a10edfc4949ad1f71bfbbc4f18ceb83463b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic-red-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83af9ce25050bf919491c1e59a75abe7930ebfb615bbe747c921639bbe3270cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning-tan-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3591892a613e88cc7c5efd8557f476cc0a784eb13ff59e7d8332cdeb17ef951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-maroon-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a1982979ddc936cbd99a251a684b4680881a06ad90f821d1ab7caef576ed2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-coffee-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bff92247a9e6cb083fc07fcfdedf3b1a9ca205d45cc4370d9a15f7c874727d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fandyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdade6e1ec652b9a046ed605ec3923b085c5589fd453f79db40f49ff218e3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...