MAL-2025-139085 Malicious code in unaware-black-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93110aaf098d52d787512c3c81f3d40b8d4d47faf9aa46ed8672588e2f65f08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138635 Malicious code in cooing-gray-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4e04041645ccefea1a7b4557022e36c1affbe69091836280e14d0184b2b7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138931 Malicious code in permanent-sapphire-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138670 Malicious code in dry-indigo-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dbf98e20619275027fd4151acecaf0ac913787eb11669176a745f6ee4bd1a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138663 Malicious code in diverse-tomato-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cdfbc7391bc8518fc084dd05454910e1f90cd03774a8fbad364eee9ed38849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138967 Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138795 Malicious code in inc-tomato-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138853 Malicious code in magnetic-cyan-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69618140d95a93dd960616e1711555b0dd44e745b6e3235bcd933d5a4706ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138701 Malicious code in excited-beige-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f79b9a18ea2a4e6b6854cbe41a7caed914e86195305d1183d1057977cfb78aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138759 Malicious code in grateful-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5352403d2c82ea93e9612c7592d466b84ba466cd6f4bc1dadbc563994fead63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6278f9a597732503eea330c3d4cbdfbde2aa97232497b7729ff6b2d47948e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcc4030942767c1d9461d7e486565d50df6e0da99c459577a899028ae6ef0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd07d6bd99e30f1b7a683411dc8c11a84eb9cc3d0eba652829ad29e86c3cde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-martabak100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3186d6caadc907232734aecdec0dcbfae69469376a4dd92ecec06e9910689dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tomat100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c462245120b2128df4b9985cd0bf274313a03af545cb6a3a2f5a0846aefc489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a314228d523895490840383c511e86addda81304971ced6f9e83ff36e129c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6f6643284343f30802f86f82a2ebf4ce93547b640ebf5971ef0c77f947780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf4548e76985922fca610f303a63cced4b11d10c46c64a1cd97c7ce7bd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...