MAL-2025-72851 Malicious code in fadhil-nasipecel99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29e02bc7a36942cd0f589b10db7cb18932523fca20a9ad2bcc39acf49fc384c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7d6870fe78acf670af85fc46c587944ad5c74902a897ab2111cd5e45cd4f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gorengan90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d29654a8dbdfc36f69342f19a05d768f00d9d392f1ba63efda421bc79ea240c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-copper-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9001c87bb2695be3c1773363e623d9e6938f6972d21040f043e92da23276e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair-purple-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1378640b3c692592596551faec9e702160b564196bfbda86ead17c22e099cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous-jade-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee63a2385372e4ecdbab4226588e0dbbc4646ccf651dc125b6147957e847619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumquill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd030be612a08de861be346ecd8482e4be029b18a5207879a5af144d9387274b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497d95ace813b16051e585e41a797e5808c519113a5e0760a224ea2fcb49287e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable-gray-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4494e8f232e8add70b6b30dd71e25d0e332099b491ebf23809b22d8f878c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-chocolate-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe06d7d2fd77bfbc212d4bda7dd9be573c2157e262482554e13115ebfdecd90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcafab38c539e3b8e72422386856d1d1824e6565916301ba5bf9620fa658c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-black-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be0bce9ec1210355fec83c9e869a56fbe0b598e55aa6293b8959bf145c1ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical-chocolate-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12c6e61b3488cb19b1fdab831169847a278bcf122bc35fe87a37b9eca9e23e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-plum-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca98fe964d40fca98da231de9126fc5c580bacbfc96fee992f4c4cb3b24b06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective-silver-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c80d2e95f677f8b72e28524775ab983b93b3a9154b143a09c276121be06ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous-rose-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3381e276f758696642d866fdb4a7cc965371ecaf875f5040896ac2be262e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-indigo-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fe5ae50abbfb1e3aa57661be87f140e791b39e674d918527f8008225a5b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-turquoise-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ecb8e54fa3854a02c14e30c4e60993f7f89e1af46dc27665ecd4d14b9b4d271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official-chocolate-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9802dc82b8e685ef80e979e433f32ad19d859031ab4506373d24bd68d3c92755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...