MAL-2025-74442 Malicious code in maya-tek47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce00632a9ab384548b4b3a034d21cae7a9968e21127843b94c37a661c71a0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74726 Malicious code in ogi-botok87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b430f57bf99a2dbd47bc148443ccb935f388bb102ada4d6f25c97e5501258225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72565 Malicious code in dian-sambel78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5791916ec0dd7caed6845a0a062c9323f4c90e25e78c8447080627469f10a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71848 Malicious code in ade-pisang66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9847d5d9c6db934ef238c84042d127c03e0ae4dcb49993914c4ff417a4229ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-turquoise-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad5189f884cfe7df5c9d999ab89b0f5c060e8a4a3deac4ecffc091266bdba9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky-indigo-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b8812da6a188663d41a20f2d5c9fab6dda39dfa2bcffc6a9a6898912731d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading-green-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c4672b4626690401117fe6fdac903a5be244b1679a2bd09b81972b56a6eb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical-olive-cow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bba4eff905b09c595547908db1774aab86401165ba4226ef6e104039bc7b079d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic-apricot-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f2551fd9f14c2db4a1603be092e19c6c0fe915a56fd06e5c8dca65788950fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-gold-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf90a227c2a8580abf1cdb50653fc11cd53371d7237c1ef6d9fa3e76ddb5322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young-amethyst-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c94c6c90f985ccdf17c8731cb305dc7a3416e773e78bd21936436d4cf8cf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior-blue-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db2a55e0b9720e975f0e8d363ce90f686e5c6926b2651fe4819d11a041e22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural-gray-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6801021e23535bd63c61f0282086a3dbf82aedfcfb4ba23190f870227bf25e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in normal-aqua-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0697b6341b80613882d24289329b28f474d79b61432c3a63d7744ec86b10a763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-rose-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aab01a3d0ac1e583a11caa4f003a308a65807b6569e7e1175cf36e5946a6ab03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69485 Malicious code in motionless-coffee-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a979306220e6542b0c8d69f78472cedcdee4b67e7748a5a3a7af813a4e085dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68504 Malicious code in generous-fuchsia-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1cff985bfc558dcae248a99dbbd919ecf8abd42ba3d711acbbb11078dc244a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66754 Malicious code in alternative-lavender-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298147db972eddbedb7bfa3b6f5e2ed564eec068be3597f7b2f00c5764e844c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69671 Malicious code in objective-maroon-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a716ad90f8f9311a36903a21b25a485c39425767c5f181c5e6a07b8f2388a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71775 Malicious code in zestful-magenta-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef476b7b639120dd8700b41ca86f8b8a77b0a2fa04d7baeeff98ee7e898b62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...