MAL-2025-138784 Malicious code in horrible-sapphire-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee24576f1bd378fcb99cdaa68b77c1ae8e426d0ea3c2eaf522a8c786f18258ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138620 Malicious code in colourful-lime-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e09cd373959464c2b553567b37856815f98e1e735eb355a835e2bc60ba10c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138963 Malicious code in racial-chocolate-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df767f4c41ac852c8a914c950c465822ae421c0dd34d5e87fe8649ecb5aedb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-indigo-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97990c3dbd394d32a692511123a3cdffa4c9e1432225671b64623153e99226ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139126 Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138858 Malicious code in mass-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39323fc49189bdc215d3a69c5d427e192d7c99984ebec3c5fb5d146e6cf91de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139029 Malicious code in splendid-maroon-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229582b5999f79aa7d666c6749ae9c69842cbe99816541e3596a10f1c3da3e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138965 Malicious code in rare-scarlet-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c87e732e830729ce0653feafeddbad3950731e2838443473bbded48a0eec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139009 Malicious code in similar-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ddc03246640b57d08834137a34dfcab466c5b1c042f58ac75c4974e0fc114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy-bronze-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793f2fe61ea3c591302a374c9a184d306c5592978faa341fdbc3b5f43744ace3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy-orange-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b7228f85fdaae76010c05d469e84496256f1050173941e932fa7bc2926359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid-coral-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da68fdfb4d7b9042f7bd29b67cf97804a03a65a7a3aa6f4978362b59158a753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible-aquamarine-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986da177a3fb6e4cf6279a045c7ddd48d4d2487ed554f3de7722576181baf393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-jade-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caeba7607568ae7288d2ef3ea6901efd63f542379c0d139a5b20da08324aa434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-blue-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18545b51bbc892f47f3801016388c75c7f3eab05df8f12b9b06bb5d5286a241c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ill-chocolate-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5555ac2c54f83f5d6054d0c5ca3c988693b9e111b21e1e7d6e7350584dd3c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...