MAL-2025-72555 Malicious code in dian-ongol-ongol11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8637d1e6d59581a35ef0aca2232ce85d801b2e5ac057635cf3f69c9875b2c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oli-gardan-tua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d236602683d653aef5aedad3bd82d153c3a180cd3f1b687172e9e62d7458a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in widespread-silver-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a74b73bc1e27ee6849d4920bb75e960426f6475df3aeb20370b99f7be73b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-gold-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8853c5cba4d87649bdd688a55e4521666629cb028433af29f15d83ffd9ab578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-apricot-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d445e35e97eaf4e0ed924b9ca863f6f7f83fc3831264de2869759d67bd20f7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-black-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bea73ff693d5c63dfd41aca065d055144b4b9ecca73630c5d38dd85d72a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-scarlet-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc297ed7772e586c4c8b160e5272f27556d29ad93d962d017d2dfe0bf4f1b839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcafab38c539e3b8e72422386856d1d1824e6565916301ba5bf9620fa658c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide-blush-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45021a943d2b49b5c072debb6291388386dbb69cf56d2fa1f6bb682d2ea69314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-harlequin-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e0e3ea278465aa8e44dfeab051e3e5237a98da96b0428869d4038ccfbd172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked-fuchsia-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2674798ae8d454c04ca54600a82ddb297b30bb147d68d80fe5e480516d5638c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp-crimson-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda62674966aea8a64918dc232dd16d6b55b293ba1d9449b3463496237e44cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal-violet-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3677b124232bf15dbc7a95bc282b3ac80574b61621475bc0e76001d64550bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable-gray-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4494e8f232e8add70b6b30dd71e25d0e332099b491ebf23809b22d8f878c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-plum-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81384638eab155e8eb446d66d499ce92585f324a6a221d4dcc48a227069d0a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical-maroon-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20efd6b311537e2c016d406a1b829697f9dd2d6789b6f0057c7df477fa42a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increased-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2532e0760780155f3c0d4dfa726304ed89309a929fb13e5a3393f8face27cd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-gold-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f289503f74889a0d2faf63f930f651466bdf73520ee48c8c01dbda93cdb0d64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...