MAL-2025-74200 Malicious code in lisa-rangi53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a0337d7a8300aa7359846bed1f7c15629aa7bdaf6d877d3088e80cf59da363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73716 Malicious code in joko-ketan29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90db5dd9648bdd847b2f48bbb786f514f6c439126135ea1ba1f3c5c56ae20cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74241 Malicious code in lutfi-kue66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cffc1f709d034eb7c7ef3c3d07cac7f1e019a198cc011b37592dbe359d2cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible-tomato-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7268b093a2d3489cfb805c8c68cc938c72b8ad52860b06c8dbac0868e9624fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial-sapphire-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a873724611a516640c1567d531eb02ad8cd131ffd57c22bd5dfad48d9f91afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-bronze-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6d0d2ab833003e8fbf10b7dab6eeb89a6ccef496bbc11bc87857e599d118db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-indigo-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990f09ed672e95a5e4bde339e9c756b5b96e3a79e471b96c1547424b19735186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft-jade-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d760d82d6cf5c00e004c217760aac7e00abd68e29199fff3fc9712d4724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint-magenta-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406732be1c258a5a95c426e2d6f49720325870d609ccb610c6a6320d8dc3a7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68801 Malicious code in implicit-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80713ac28a0a287d70171707490645760a9f94c8c115d9159082276af4f8e802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68821 Malicious code in improved-yellow-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70144 Malicious code in quietqx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd3d3388386f6abe2deb41e54df9270f8290a6eccd747a368027b7e9d7b6cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68989 Malicious code in isolated-white-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9abe79d3bcaaa4be58e6907dbc38d706a51effaa4311e124d649811bd7e15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67421 Malicious code in conservation-olive-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ceee49120441d56a775da6733f3f392ce0c2bffbc5946f24f8210e018efdab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71085 Malicious code in testy-brown-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf79680a940ed58b14556eabebe415f9d11743e4e74f149d43d8a4041c3190e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient-orange-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81144cf58581c84d2a615fc0b3466e16fc89452f8ace46139c0299f887c61e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-jade-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a429f4058f5bee023983b25c16906d5d4bfc5dc910ef0162fdb21e096f2d108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective-emerald-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32965feb009cd5ebdfd7f5086ca5b7f28a550910e38ebbdd193432b7cdb6866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-turquoise-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2539b34cb73167f8a492d043d976f9a9bd3ceecf289c4157da03492de744ae7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d28f3d0ea6ddb83be6c365b61ccc3886dbd438cdcc47f3c448b5058a2a9ab00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...