MAL-2025-75170 Malicious code in riana-sambalado45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead8f50535910e583f15becd0592e45b2559cd344274e3c146ab9e343cd39a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72874 Malicious code in fajar-gembus20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08715d07f901987f14396c41975f4747c2aa25aa7ae44c3182fa046887f3e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74769 Malicious code in ogi-toge47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdf84798754af2ff59071118cdc1b2409aa3554c72c04d45f86ddfc55ea29e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72365 Malicious code in cindy-ongol-ongol49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb6a6c4681850da6b0cb35c3a75c1b35e05f2e456d57ca707d33c0d2e18e7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72679 Malicious code in eka-sego74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1a69a09c1726f4609586391ceb5bea115b5b5714ba01aa76566efe63a8f6161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-lime-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74704617f890725328148a08ef0229570d14f146f53f8425c2eff04584235546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-brown-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a00aad483d8d94f8846d21aab8ddac0802aacc122947bc45f028866dea53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radical-rose-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8367fb776ad7c38eb66685ec4896e99ec3c00e8690bdfe87c1331e9505682586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-fuchsia-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c46dcc80ef31cf47c1f96d0ed43757aa11369292da1f79f93e658eae25a82cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-peach-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592d61d32e13464ac67626fe88bfd231bef380503da2f1c7901b05cd57ba1bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-salmon-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f88a81de5855bc0d779515f519c145904c8b959b10b4326141b01eaf1805b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate-tomato-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167a20685872395db398e3e1dbeae1bc9a98b0c62c1230d92667770efaacd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy-chocolate-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753afef19465c18cc6d98e10fa0a5cb965eb1ca79741bf987d583a1f40f6aac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advisory-emerald-kite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc1a85f3a539513126cb7696ba6c1c970d9774e4c6366d656314ad578c5d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0415979ae4d869f2df080427e26ffc580d00fe6b177561854384f8f7a4a2e49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in productive-teal-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61dd714d014eae898bc37a70219012e107864f376559033597b4714fdc9258d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-plum-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3e5978ac43ad3d3cfe803eb52768c51dbf2c70be52d37062aaebeff97e8966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-salmon-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3d988aaf6fc06bcb9e178e6e282ed3a111f9ad3e31b371b330ad67ee550576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective-tan-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d6c43208430563b7c39c8b629faa641d9dc45406843bcd8d37835e063f3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zerizt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc850463ae00925739b2b6e905cf9fc3e8c54ac26872e733a10c7058a46d222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...