MAL-2025-75702 Malicious code in tomi-keripik82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fdaa0f31eeca58dc5e2392c97484f0ae88ba61b860b1872bc84cb627b55452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcafab38c539e3b8e72422386856d1d1824e6565916301ba5bf9620fa658c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-harlequin-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e0e3ea278465aa8e44dfeab051e3e5237a98da96b0428869d4038ccfbd172d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-scarlet-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc297ed7772e586c4c8b160e5272f27556d29ad93d962d017d2dfe0bf4f1b839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-plum-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81384638eab155e8eb446d66d499ce92585f324a6a221d4dcc48a227069d0a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal-violet-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3677b124232bf15dbc7a95bc282b3ac80574b61621475bc0e76001d64550bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable-gray-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e4494e8f232e8add70b6b30dd71e25d0e332099b491ebf23809b22d8f878c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy-copper-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9001c87bb2695be3c1773363e623d9e6938f6972d21040f043e92da23276e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising-gold-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df78ef24a638254abaf9588b4981b28bc1bc528bfaf780d3fbb23a4b32eca6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed-brown-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c124308dde98ea06ce927c7260da20d48553dc54deaaff8e7d00518dfd8b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaky-azure-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a918f66bcceb1101ed929cdd296abace3fe35b97e4b5829265d61318226936a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salty-peach-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947c9dd6906e692293eb4921e9ea447f509766d698878811aaaec3f24c47a104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior-chocolate-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b63396d06e20fd598cecdef9224194216f88742e716712ec4ab2e9927606d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-lime-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b6011a3d7d6c2368eaaa23714613788b6ffc504671f1cf3887af92b5bfbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-indigo-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ef9e45ab44a18d9df480c09e2f4a4e560a3df91f77d7f20988fa4be97855ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial-sapphire-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a873724611a516640c1567d531eb02ad8cd131ffd57c22bd5dfad48d9f91afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-tan-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da5115ecbe3d28579567988586a88cca7b709a9fad878b1796ce5e259b9e391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural-sapphire-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf13a2a8728d231932d9f4933cac62ac032b213314737f3d85b0f9b5e7477b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical-maroon-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20efd6b311537e2c016d406a1b829697f9dd2d6789b6f0057c7df477fa42a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading-rose-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae151318b61013eff978e6f53c74a713cef756b48d1ed8fd045f5951018d072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...