MAL-2025-75968 Malicious code in vera-kue90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc442ef1584923ac1afefe611b8282393a727f5169cdfb65357ae430648b9d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75079 Malicious code in qori-ikan37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998a4c42fadfece1587f20c849887e480ec7fad3c41b7bf96201bf7c8df11fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-jade-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be09c1d0ad2de462cc1c107adb0b674784e778a142f3eb0f752a03bb7af49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ee152906583f5c46877e21118ab2a3a0dbe1bcaf7166ffde17eafe64ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-brown-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbac7f7795efef2ab473c85bdcad7a99b03433f965c6f75e8a9c1baefad7bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible-jade-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ab60d2e51f39e39af88f544c6031f1b716a21c782a5f2878ee5980dd5d8d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite-magenta-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20b0645674e9b3439bed36f9a4679385dbd19ea89304088545b7bc3e9ba0775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary-maroon-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615caedeb50ebd532e6343cce45f050d416263a5e320810577d13b0eed883427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-copper-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c4d488e2b83fb64622a88c2da565b42248b1bac346d25ffe38e09394213200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-amaranth-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2982061858556261e614e1b43d33f94fa04b447fe5d9e59e1677dbec2ed6f793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-harlequin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416705276e35227a7d9261c4d6597c3de24f921fb490a0c9db23ca31959cd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified-white-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37eecfcb43417356b879f2a1b18121892f0e6c0e55dfa4b468b8e21ec2912b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised-beige-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3d0a996a29ee987da60e1fd15fa9f4bf603938129753da7e76f9769c1aa79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final-olive-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c69bc065eb134e103fb451a469ac054f3d8fc2b4032b6e93c674000fc169867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable-amber-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07d8387f77dcdcc6e6bc9586eb3434fa69ca5fa6f36b17c897361e31c7e9235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear-crimson-leech (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f57d5836e71984395d838b1da38fb7d3df74ce16584ef7769b10537ec0000f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing-ivory-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d6707c122ad21bfe8a77590278fed7483dedf9a77567eb7555ae2536fe4a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-harlequin-ox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36f45ae10da48331ac0f9b4c05293d2cac5959c595c4fe7e469402741c8029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban-pink-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b8e122aa57577d4920fab918b68243b1f825e109db62b540cb2b9f1f82960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...