MAL-2025-139126 Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138946 Malicious code in prominent-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c86b8cd91a495289e4841a1988fedced34e88bec52dd84e0987e332faa9f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138671 Malicious code in due-jade-dinosaur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caeba7607568ae7288d2ef3ea6901efd63f542379c0d139a5b20da08324aa434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138823 Malicious code in keen-bronze-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d83b0a960d8ffa5be828fd48039efdd5f31f2970fee98a20051830da6d4e9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139001 Malicious code in serious-plum-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9b11505f3055d2ea2d72371793d97f58218b9eceee9774ef47c8f20673b19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138952 Malicious code in psychological-tan-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73930fa78f7476e08040109b2d4832619ef283411e3703235070bcedb9ae3bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138907 Malicious code in occupational-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f5cab03121ae6bef2a8c9771efbd4029a1e16889169269316a450f9f843aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139092 Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e82c53a08ceb07cc6658c93d6ca369aef45a2d9d415128867630a8c4eeeae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-gold-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd089cb204e640c0a045dbc093fed6b80b99038102a240a1b691c1be42922408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-gold-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb537506129c047276d89848302b0b0473a71b053fd629477018dd84e2163b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead-beige-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82f1bc8f94c4af627e49453ce228f8a52a22768038b9f66ef8865b0a3276be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental-orange-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf2b1c7d4574027372c96a9437db17e6ef6312dbd95da41de26523fa4393250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138649 Malicious code in delicious-bronze-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a842dd518049959869aed4dde24c81c2e9a5e144512c9ef3fbf67507802d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138675 Malicious code in dynamic-turquoise-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d331943744403a816a9dfcefaf6cd03296c4dabdb773aac590bbee69ff6c1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138960 Malicious code in querulous-tomato-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4576a5b87a9b1b10ca144423586d36a7b826df4efe3835bfc69499d18f9034d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139034 Malicious code in spotty-green-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235b2d0ae78ab8ad8a86f5f1b00a821d6d7696dfa134f0f972d25217e09c3d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138721 Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...