MAL-2025-138721 Malicious code in fiscal-amaranth-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d270e11ef4012653ee53b617b958f166f6f81cdfd07cefaff96c7145bbb5886c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138657 Malicious code in difficult-ivory-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7665fd0ac01dbc5b0e30438213d33571666429d81072b9a2afeda4379d5a48b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138727 Malicious code in fluffy-olive-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fe395414a455d1f5ee1d3f47b24fc95e181fa1989275b8438058bb45a61f9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138649 Malicious code in delicious-bronze-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a842dd518049959869aed4dde24c81c2e9a5e144512c9ef3fbf67507802d98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138911 Malicious code in only-tomato-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc87ed6f0f3019f6c23d86db67be6d7b912477d56ea8b23667d8c250f6efe692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138811 Malicious code in interesting-tan-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b840a0b6ec6c6242b298dc58787a8ca6bd2f374e7b8ce6f2fa3b3dbba356d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1eedb420cc37719c39433766087d1e29a23f2c97a0ddff500ad02bb3881002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-olive-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ee55b0595e776f8d9225a44a4c603c623af94b0d72d54632ef8ada5a0b01ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remyd7fh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501fed8bec0c67578f202a34095b9bcc3cbae44eaa54aec08cde62f287e21757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny-orange-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798765f26efb93ff4f1d23a03cb7fb342a0454a0f988b24750d8f121afd174f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138599 Malicious code in brilliant-cyan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ee89f191c9a7dedcc977749bc2c118ee67eefa80d30c38aea5e284c2f35d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139016 Malicious code in smoggy-lime-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53897c4ff35fa4579e29ca086d5717918f25b29a030ccfab161c605dd9822911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd790877abf20c0be41145737c373e5e0c49bdee0530f9deb3514e20fbbdf7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult-orange-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fc563a5ee0e2921e72af685639641d7b9cba9eaab7f13272f44a1f68d4cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-red-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a18632c06042f55d22b79ca3d45debfbc72ed14d2eb6c51670bb22e13e2186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest-lime-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95261d4a1333a38b39c936f972a46ef6c05fa1cb0c1bfe38a9843216b59d55aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292b50a4c914df6a4cf3e6b10b3eb402d664283510b566a5875c88f52ba78f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...