MAL-2025-145452 Malicious code in nightmare-xanthus-axios-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d3cf0cede53ffe6a0ae185eb7fc9c23b589a2252b436d26362ada0706e288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61943374ee28083fa6ec7a427f8625ca5e007b6c069eb21508d20dbe6f2b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc193212bed6198df35f5621578795bb225e27e93d902cea7802975cf77b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139140 Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139144 Malicious code in lavahala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cd59a7eb6295d7f3e73580981b286f953cb7a25ddc84543be740204c31964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-blue-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18545b51bbc892f47f3801016388c75c7f3eab05df8f12b9b06bb5d5286a241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-turquoise-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78692f7b8fe0dd5c0c474720c7411abba945547e12c86775a46fdfc4f29864a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-yellow-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac9fe13b222cf34787fe46db80eee50175081d57e34c9adecc138f5c77cbfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive-yellow-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347c0a4bc6c6dc50164f4938053abfe0fb420772bc5eb18e843d0551531f3155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-indigo-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dbf98e20619275027fd4151acecaf0ac913787eb11669176a745f6ee4bd1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass-white-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9d58a2b13b2e04bef17537a288538813d12e8f9d2c4d3268608769849f2ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale-apricot-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b6ebad71ccf926a9e0942bf3cd1f3adc3cd8e41785fba5e2cbf2fb9a1956e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-lime-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34414b15538fbb33304a63a783bf9b4bdb074b3309d03ff4a3776077a3f5758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139116 Malicious code in worldwide-ivory-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82eb57a35b29af05ce640fd9f792f96f2540ce409d14ad557e0b3bd7043045f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138754 Malicious code in gleaming-chocolate-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cd5d3413a83d04a7ccf20e9d34dc63a03c2de5a34edf13653e6ee8d9d2f338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138752 Malicious code in gleaming-amber-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3777e6fdc1b4b372b8acf2210560d06c2431a200391f6c4512d754ff09902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...