MAL-2025-72989 Malicious code in fitri-nasicampur22-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215b732c26c05d06bf66b62396a75a4b8eba283f96b535186ad13a6a099c77fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-emerald-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7bd965d7cac942548ed7441ad208018990c8e418f6de32f1adff789ff7956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-blue-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba283d6d87d931e7bd5188f8511c52182824eb285244ec3fa84c488d1fb7742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331997ca0eae7b1b4bdea256c36958dcfda3325ca0d31d45675339849fab0bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief-teal-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869320090ff77f6431b14e67389e450a493e328869573fa69884731f5f0e3124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-violet-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6388b7ebbeb7c8ba52e991caa3a81cd2f2de88b8ecbbcaec30c1304210668b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89775125289ceea2f67ff15806b219b748eccecf8e0a0476265114c4ec623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-turquoise-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299dde70db6b11a153493c31c76bbf7c4718642fb7cd89f8aaeabe3c263dce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-azure-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1f4c9cb920d4083a01c8a45d49963121b1ad809256d25aaec562aa99d5e45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-purple-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44babe7a39cbc6df30cdda9b71d4e03ca66d8e0e6b69e270a18d166c4076e75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c2cbeeee81e536fcfadd440dd21b38931a0f8b6a7c222b77531f96636e698f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-rose-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8663bc5037b5a5700974e2fd4832ced2ae701c52be73c19e02b0ca64fabccaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-harlequin-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5df7259071f577921ed0dc61954e55eb5bcb4ea37906e489b473d6b35f63ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-green-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71ead66acda41e32e3806c2adae804e9981d334bdf5427eec522696df9aca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-blush-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c6e411283a031f8d057a3b3e630eb64fa7774bd6fedbcff4110f4994119cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced-tomato-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2b60278e03279f791966c9bff1be323be12941524a4c377d0e9a16094b1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular-purple-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67e31a617872f336638e1b362e6f9b011f927aa8e677f5e30be9e54046a9d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe-peach-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba900152f25b1d7af6174ec42b7ef90aaf972514751f851a439e969fbb795c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy-lime-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d555979e970764c8ed44a504eddd4a26db409c3d07000d2a0c0950251c01f3f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural-aqua-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585d14ec5ba0c3539cb50596d26d5d28a6cd989477deea44ab016edb5d438157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...