MAL-2025-73866 Malicious code in kiki-kupat29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184dccfac3630fb50c5bf753348bfcac90190a4fda111e83cd22cf031129d1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73794 Malicious code in joko-tongseng48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7010f900b46432c75b192eda5895ecc63af409ca2115df171b6c3f6f673edb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-gold-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ead1f36f6e54ec7ea92506786df8899e9028cef25f59e83a39ea79b564d02fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-indigo-orangutan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ffd48e718174e6e15527e15db459be9830771eb279622f32987ea58e17d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-azure-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1554280d5d97309dc985f61e65d2780a1122980cdffa9fd61ede75c148a047f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail-fuchsia-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fcf01baeb45153fdeb74f5950e864474bca62a8285e3b6678078932d677763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile-magenta-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5dce3d78ebe628ab22539b9bd823176f57a42c6fda3f006c8f7a571020c0c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper-blue-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4540849173ca9cbc681ebd4c57236d91ff7d362481e1733be9f532e650c57cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon-amethyst-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6614e89063b0e03d731349443a4252ebf692ab3d3a5d1b21833bf92a570c951a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69531 Malicious code in narrow-plum-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd01d37760228465e452dd3e0682feeeaae077defba5998011a089c45b6c8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67045 Malicious code in brave-blue-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a3d8af2d905f4e3342da1bdd3b70ea17fe2ae13b5172149afa8c27872929b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70907 Malicious code in subjective-sapphire-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada4e2ba0808f82c43ff4bd377c7bc0eec1da8a3086c961d89ee46dc31275c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69367 Malicious code in mere-beige-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a4bc64185d18d8bac0d364207516154765a58df42258dde0b4a9c1521d6adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious-olive-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be70bc84058613d237921c84661ff03ad21b6dd47293c73d27efa6e1840ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rokochisefa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ece80b5f28c7a075896a9bcfe098cbbf2674aad774d085d560436abdcb675f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric-yellow-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84795033e2b4a78c80c80ff6582f8d62489719b8d54383b31cae433b7d3a8f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-lime-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414beaebc86c65d7fc660622dbec34b1bfbae8e285b052a5be658083a188618a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2242212ce964287e26c6d7d1d186cce4535f06aa0cea1f73d91cfede382c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...