MAL-2025-74555 Malicious code in nana-ketan36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6fb5a9a8c2b18f86f6450f111221670cc59a402940420a4a7bd98ca921debf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74473 Malicious code in mulyono-nasi20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648da1e0db0424aa20869b6083cb1ad99ffdb95c79584f1ba203312038698e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/bipy-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd1ab3b131030644d495da62cd912628c876e2afbcb31d1fbb4cb56d5b2bdec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-crimson-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c12bb56bace184d324c5207fe72726d18970c5e8af1ad23b73ddf99a75dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-plum-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834822e314795ae08e9efcd07bd32bd9aa24e00e89ea308d76bb26ed6e663a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural-coffee-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9548be6b7e78cf127c261f8cec416efdf671117f2c52fa1261fc4e63731ff5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-pink-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e294bf7f2c1281d9bca42fd62bde3e62010e97e4693b6f66656bf9d46a85f6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-indigo-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3e1862f32f2c7cf3c5431a4ef7e7495e88dcf8ec288584c903ced7e8661ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief-silver-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b800e0089ac637c60c63a4b72b42ee399be8c336b078830d65b4708b81c7dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen-jade-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dd6d2fbf332a3310e35b042fade68d07ed938ad90336e2d4aabf7303df10be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical-teal-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9fec4a03289680e8b011f164e3a1dbb3ebff93723462a2f85451814aa092a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-maroon-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052f5d927b280655b9d75714a98a40f18d53f32edd7719807ece9baba53ee3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential-amaranth-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90a450a0a8ff334a5d41905743c9a7984981153b9c71464c5c09768012ce5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-purple-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66320ad6de3599215aa109f6cebebdc1f8e71f49c8b848ab4913658d105ee39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy-plum-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6249020768e29368454cc14d6081e35528ca616f3b0648f3d9a64f7df5fd0c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-aquamarine-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73074c3a1dacb6193609183418ac0620079903ca8e21ec458ebc1b5e325d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-pink-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970c3c0e221f432bbf76ed3bac1aae55d231c1700f40c1e4bcfc8a89b3977ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted-tan-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04668cf8be2dd7f05b095347e1c6ee51b7144c39f03727e4139d35659438f773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...