MAL-2025-74565 Malicious code in nana-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab6b0168e20d6625c5f0f423ead67284c5f9f7370d50e5efcab0cbf83ba61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75339 Malicious code in rudi-mieaceh80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1946e89cf5719ada35511e8c2e0482b5079345c27192cfadc5061d10f827cc1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76188 Malicious code in wawan-menjes33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783520f20c8600abc08b9e3a96bdf449ce095f522ac81e0511af7eaa9de3e131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74889 Malicious code in patria-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fb50a8fdc302c5adc5e83270dcdb466330c10093f753f37c7b1c323b66ce3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-ivory-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e44e8a5bd7ab03f900103efa518041b363124bc48dde3e97b653f13ccf0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537dbe03284c7d8084295d89f227b56d8139b06a2025391f37abf9ea37cc0d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66985 Malicious code in blank-harlequin-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4ba85309dbaae23d0b6ec75e14d0dfc8255801a95ce5fdc28518464b62cd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70663 Malicious code in slight-scarlet-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f2726a87665b474848a451cf5c0736ec22112266bb48a3c9f0b175f0d5b104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69460 Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-gold-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6f454531c2af77305c8ff92e62e55fe1418106c05863cb11510198e7bd0513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ee274d8d379fcb47e73967a3ed7b93d0f3f6febddd5fa80af85eb6da54912f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-tan-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f75aaa18f93d307754913a0231665bd25436ae1d9674242873f10bb395dbe4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...