MAL-2025-139042 Malicious code in sticky-blush-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebcbe8f2544cb864a3dced0d0f57cc2d8d5027b806ce8b1d990c962276dab17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh-salmon-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d9478520688cc69a37b3a1c65d4666100b03cc43bd663bc1b7de2ba243c76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable-sapphire-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d415cdb3b27d3a025bec726f6bb6bf6c68fa1d5b0a883b2f8f947f9ee180e061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant-plum-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae52cfb25a9af9c388c4e718280853f0a3261a39fb8fcac1de8ae77f8340cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138735 Malicious code in frantic-jade-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871ff4bf7f1912c86b6eea0dbb591b4c79ddc2d597214547be64a5fd0178ec17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138625 Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138808 Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c94ea4747f8fb2dd59ebc025790319974d67919d0575a61923400debc771201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-teal-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a34044521b8d493446ab2db5511bad2eadf7225dbc6736f3eb20f283246bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact-salmon-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7044b40d221b50f9cb6b01adeb01cb8e2115df9a991d7040b6ca26a60e4eb610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39323fc49189bdc215d3a69c5d427e192d7c99984ebec3c5fb5d146e6cf91de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fierce-black-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf576affb6ee192d02365a19896fee646b4e06efa2c9eb3aaa90857d8bbe5876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-sapphire-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1c7027c059fb5caf0b20ea36255ca09be916f7b64b3a0844d8678302bae60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-copper-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c94d415e9762107a032bd4286a05d7948b45bbb787b79fcc62e39acd4a3ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-yellow-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1692a7b786128d2e1e701c77cb89879f06e9d08a068cf73cf9f21a12342c94ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-gold-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6562230ce82e2f1c036b10ddaafc41d702927fd104d9817b199ba68bc38e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old-bronze-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f992a7c167603557b99a2d242d25449585b6f3a6eefd7d368f60a93ed729c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-crimson-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9374f0c303808038a865b2e245ef9fc2075512df1519911282a51202fa4534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...