MAL-2025-139085 Malicious code in unaware-black-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93110aaf098d52d787512c3c81f3d40b8d4d47faf9aa46ed8672588e2f65f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138848 Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138849 Malicious code in ltd-sapphire-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1c7027c059fb5caf0b20ea36255ca09be916f7b64b3a0844d8678302bae60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138654 Malicious code in determined-aqua-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca03b9210b3d527b64732cc5c80ddd8d0f13b5f3bb8f8687b6f7564273bdcf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138635 Malicious code in cooing-gray-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4e04041645ccefea1a7b4557022e36c1affbe69091836280e14d0184b2b7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139039 Malicious code in steep-brown-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec9571e22af8ac705018333dfc04423deac426b6636f83bf25de98942870258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138670 Malicious code in dry-indigo-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dbf98e20619275027fd4151acecaf0ac913787eb11669176a745f6ee4bd1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138624 Malicious code in communist-purple-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f27177d9140d4433ce03a1e7070d23c9ca65d046bc433adc7b68a2acdbd114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138663 Malicious code in diverse-tomato-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cdfbc7391bc8518fc084dd05454910e1f90cd03774a8fbad364eee9ed38849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138931 Malicious code in permanent-sapphire-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138913 Malicious code in opposite-beige-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83a95118073e94dde2bca2edde4b80567741af45e29422d214d28a7bdec4fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-keripik75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23da93cd7a2982826f2c4ff40966c59f7745cf503af2f36696634b0e85ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-jamblang8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd139ea2ec76692bb3b4bc8105fa6de8300a5eb9f52459e30dab592fce8acf35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-liwet100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f288cba31c7536ebf6b16e33e6825eaebcd7405ecda10416c23a74ba5887b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6278f9a597732503eea330c3d4cbdfbde2aa97232497b7729ff6b2d47948e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd07d6bd99e30f1b7a683411dc8c11a84eb9cc3d0eba652829ad29e86c3cde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-martabak100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3186d6caadc907232734aecdec0dcbfae69469376a4dd92ecec06e9910689dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tomat100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c462245120b2128df4b9985cd0bf274313a03af545cb6a3a2f5a0846aefc489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a314228d523895490840383c511e86addda81304971ced6f9e83ff36e129c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6f6643284343f30802f86f82a2ebf4ce93547b640ebf5971ef0c77f947780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...