MAL-2025-73181 Malicious code in gita-miemee40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e4481db679a852cdb667b7ce6098d803c80f75229d65533ac7de69b5bfa810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular-white-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e330224b92cd1fd2ec49049fcd319e50feb3476ea27322623a580bb948b261ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming-violet-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c10d63ea276af842ef6f8a69d4035ab571ca02740b3a7389fbbc26f57baf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic-yellow-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c885a2a4caa7c910751cc963e0c6ba8015251a591b52dc74989238a2563d8e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow-blue-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1271707ba1fff1cdf4b58258e4f4f122ec45b2468f44ddffd7e95a2cd4b45d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive-scarlet-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4803120d621ccaaeb1c27d657cfa0839a69e6d98f113b92821a0022c8cc9948e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in richirok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9b3ec4c800158a7c721b237e626d01cc3d04ef6eaf33be85059835b93d1dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46df34f4f2c9839b0c16845e8257561208a2fc64a28f4b6942c4d8de5accb70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69375 Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71549 Malicious code in well-salmon-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f852fe0c7b047e54f22549ea6098cd0598526485f61f59b6416a04c079f9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69836 Malicious code in passing-silver-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07283ebff686110d09d5a7d2e0414f484052f91a1175a593801200e22aa02553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67983 Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68427 Malicious code in frequent-teal-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ea18f70e7006470f438124dea2d5bd1bfafc7ca02c5c507804dad0c6c547b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68038 Malicious code in endless-turquoise-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5c109a61e58c5767a2b42c54204bc2bf87bd85f5fb3c8d96cfcd4342d0521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68015 Malicious code in empirical-aqua-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d9d5b932bf56517d8470b61ad758e1ae23963b8b991da6ba1ee4283e0be9ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69859 Malicious code in peculiar-rose-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8942e3c365695bac2fa1414374723f7024d3fec91ca529501820bd1ffb1576ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71001 Malicious code in surviving-beige-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec1cbc9c06ca0a1a1dd05f8c405c6b74460989a451565d491e49601e65e681d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-rawon17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed71ba9019e7f8c1c8229b8bd6dc9b44c6c0649d516768c0045c56a5f03c4810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ragi18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e3773d109184289fddb333ecba7fa2ebcc8f03c98d2dca031372ba0b10fac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2a69d1d6d5667a72809e85918abeb90c4ee9eaec48d016e7d84787e4b5d9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...