MAL-2025-138855 Malicious code in mammoth-brown-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfac41640fd80e5a53b1801bc8d9c150c5fd613bbb318bc5064c0781c6477db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138663 Malicious code in diverse-tomato-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cdfbc7391bc8518fc084dd05454910e1f90cd03774a8fbad364eee9ed38849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138623 Malicious code in common-coffee-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b157514f38c2a35cba6eb0fc85f30d7036b5c41460581d6a69c128bd0b25baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138895 Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138682 Malicious code in elated-gray-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c32a771f61d8884dd839eb457a9126fe4d205325bf194b113122900c6b8a5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139094 Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138733 Malicious code in forward-olive-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda4ab6b7f5634651a53d011f38d48135f98262fb93d7c8ca5fa323c1c33905a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138994 Malicious code in scornful-lime-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34414b15538fbb33304a63a783bf9b4bdb074b3309d03ff4a3776077a3f5758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138967 Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138786 Malicious code in husky-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd790877abf20c0be41145737c373e5e0c49bdee0530f9deb3514e20fbbdf7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138624 Malicious code in communist-purple-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f27177d9140d4433ce03a1e7070d23c9ca65d046bc433adc7b68a2acdbd114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139059 Malicious code in surviving-moccasin-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f235ba1eab40ba3b200f82833d0ff392c14efe1abb28c0ca1f8c8eb057f3bafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138749 Malicious code in genetic-red-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83af9ce25050bf919491c1e59a75abe7930ebfb615bbe747c921639bbe3270cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138706 Malicious code in experimental-brown-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0fac05da3d5f7512833d79e12744e38792a030aff6268ca10e53609bbc3197b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-lavender-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9281ba5d27e75ea0a077a2a1957518f8fd3cdcee4945eab4b5ccbb558a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-cyan-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db7c5889328660f36965d0228ec4363d33ebd3da5ec1550334b53a3a99b9e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-scarlet-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbd54a7aaba2517971389aeb198fd0d9fbb733f07858dfeb849c38fc3714f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected-scarlet-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0e57e2fd57f024a29eba4e9a259d51e3eff88c04552683380975abbbcb0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...