MAL-2025-73575 Malicious code in iwan-kue40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6a3722b60d167704f1725c45ead2a391c37cdfd95d9d6a59854d3fff2a87b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-emerald-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7bd965d7cac942548ed7441ad208018990c8e418f6de32f1adff789ff7956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-blue-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba283d6d87d931e7bd5188f8511c52182824eb285244ec3fa84c488d1fb7742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331997ca0eae7b1b4bdea256c36958dcfda3325ca0d31d45675339849fab0bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief-teal-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869320090ff77f6431b14e67389e450a493e328869573fa69884731f5f0e3124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced-violet-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6388b7ebbeb7c8ba52e991caa3a81cd2f2de88b8ecbbcaec30c1304210668b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elaborate-rose-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea89775125289ceea2f67ff15806b219b748eccecf8e0a0476265114c4ec623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c2cbeeee81e536fcfadd440dd21b38931a0f8b6a7c222b77531f96636e698f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-rose-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8663bc5037b5a5700974e2fd4832ced2ae701c52be73c19e02b0ca64fabccaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-harlequin-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5df7259071f577921ed0dc61954e55eb5bcb4ea37906e489b473d6b35f63ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory-silver-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7005303ca207a96e9e992c79024c1e0b6713a036d988005268a9035618890a16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-azure-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1f4c9cb920d4083a01c8a45d49963121b1ad809256d25aaec562aa99d5e45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby-gold-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b902e2d84290bd0e4a8f09e8d3de86ef01a9fd22d15f47d4fe0d8fcf5a6b8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-turquoise-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299dde70db6b11a153493c31c76bbf7c4718642fb7cd89f8aaeabe3c263dce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-gray-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22345eec11987e01fa941a6a73a005a158a95732a98efcbec424ba5addc7bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zippy-green-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05f8f36b1fffcdf735f5647f5a7d1820f1930fe804ce25391ab12205c086ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ad03db1e1444b2e556fbca151679c71a7567a020a16022d96d62f6b071b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-white-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120dcea9a0d899ce2275748650416ec0f7a623616f1d756909add97db0e44f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic-purple-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6a05fe32b6603f9d853c600aee112f84f15e4c10c5fc7b9ff0fdeb6ec903b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-tan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419c4f444be457d9c8bcb0836f219b760e6cdf7836078460366dcc45d02194c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...