MAL-2025-73508 Malicious code in indah-tumis19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2715fd6caa200017d72f4b63c7bea1d36cd1f87c50e75a6daba9cf17b383a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical-bronze-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecaae9ab01aef6b0c03044389ffa42a8ed2bd955e3992dcd53915be371132863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited-red-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f763e235e5d74ea18d2c972f733fac308177b2c699000271246212d4324f161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-emerald-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0a510856680ad4840f3d23b0dfcc1720919be5bbb1043cd0297b85954fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-brown-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299a9c72879f97febb2e0e99cfc9672a065dddcdc8bd89c605588b5b75968e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous-aquamarine-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d0a205d859caa8b02a2c4398eb6eb4fdcf58330cb8b6cc27d628d810a864724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen-violet-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eba0d578d1311fc8a88cdbc64dbeda47e5a7050d4521be5cf43f24f8bbc1c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy-cyan-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcd16d86b1a9036af518bee0be057969d4fc210053feb513af7966041dddc45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped-apricot-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9676dfbcb65c524192ecff9fbf2427675c7ff08bf0a6d6117befbe4540a92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised-beige-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3d0a996a29ee987da60e1fd15fa9f4bf603938129753da7e76f9769c1aa79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-coffee-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a8e6c936fcaeb396e096a81d0ccfb8256f5b5328e3dc71baba7b8a729e646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic-coffee-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645139da4c4fcc2e2dd80ca9d466dc3564b03e13717665ef6643d5997535a494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-black-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3b7e71977e9864b87d0d84d8d5133c4ccffa7a0a082ca7627fb84f4c00694c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-fuchsia-salmon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edb6e0368176708c17544b8a0b9c5b8b61a3294e29e8eb6a506cead781e7ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bheyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0de7b985fcf88296db88eb43477a16582eec079bb3731ee0b6f43a1f001f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2014cf5356d8a20d50bae2592d5f57db23b2046f03ce3f53099995f3d571d8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-green-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7004faafa9d3ad86872f028aa8e3c09524a0bdb71ec442518c381f0c767d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-turquoise-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe9a2aee7f0c1bdaa9b4489ba5e85b487766abd34432328b7062582f15da173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic-indigo-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2a0247ef867054f94aa572f42413e5f99ac3802e6898f3390a754b7ee29cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...