MAL-2025-75322 Malicious code in rudi-kacang82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f772100c7337af7bf4bdbaf47b6e54e134770a9cff51834c799fe2db041032d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74529 Malicious code in nadia-rangi68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67597413f5c4439da341d601a281e03ff5efd41a8ae2f866c787c157cf09af04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy-aquamarine-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f278cf692a01382215ed581f064b588439a2733e52856f09bdf74738604f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful-salmon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ac381a9c571e716df9cfe9a7ee24339c25657feb7d8a03dd2de8910563a280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-olive-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c643bbeaa8c186809c19398f19813195f06ffe07452a8236703fdf88812c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional-beige-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269d347d59db0e0e9cc28cb51693903707c95e3f7d056d421282c05f820c8df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-emerald-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0a510856680ad4840f3d23b0dfcc1720919be5bbb1043cd0297b85954fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capitalist-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6d0d57300ef72003c318f75d9e83d3482318e2be9c902f77424f24b90f0263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly-teal-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6ac5034c81e7268a96ab9f5ad70e95c30d1e46eea5719600125a92a2191ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting-moccasin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2838be45bf20798d1a6f0a2c74dc95211d6282c16bede0960d4feb9d65deab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic-emerald-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a25b49d9448ddc943d7c45dddcbd9be6a60486751b51052786a3bd13303436c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary-maroon-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615caedeb50ebd532e6343cce45f050d416263a5e320810577d13b0eed883427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate-tomato-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e5f7cde60c6f672e410bf6925aaa78c50cc0fc616d037383f5b0fa3446213f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-bronze-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e1faff0fb22820947b556dac9563e6b3da3d245a96213b6c4d7580438a560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible-aquamarine-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56705afa4f684d5bc6208624073754f872464400bfa20fc4f0a26bfed899cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-sapphire-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55fb88cbd48213ab0089a62adaf1130e6fdfca493b7a23c105b23006db4afee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric-chocolate-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecdec1b9113c2c5edf8eb21625ebcd25e8e39e653eea1bc4f498f637713156c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty-purple-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2e3637bd6a8989a2c15031d5e7ea6e5d74ebd45d8e1b5bd430ac48c2d1e259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68174 Malicious code in experienced-brown-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680870cac03b6539e7e0904c4162dddbb6d43aefb6a985780308d72bec4d5952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62a9072d0de720446707058a88dd8d28fe9dcc26968e07cfec16d4b822e0959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...