MAL-2025-71807 Malicious code in ade-brongkos5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9439eb63ffc7dccfaa85a744f74dee3caf2e4f4c9787237b77aaab024ea9f202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035391b18ecb6b6da7a0cb471917359ee2c437aa3fdea6311e561e2665844e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious-chocolate-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c285835ce5c45091a68e5cec542b5d18b1c70fd94d68a08b2a8f7e8b06442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71781 Malicious code in zesty-silver-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe030c3f7df49f8eaffae28ebe9816e3a9a9a769b5c1205af0642d04cd15c3ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69101 Malicious code in legislative-indigo-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8965b582771cff5098b8c1d405b346a4175b70278bbed8297ccc796d310bb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67230 Malicious code in close-apricot-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d421b61fdfc98723e93dd39ac5fdf28fc283cd4492a447460082570174ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71734 Malicious code in yodelling-plum-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c03d678403fd871a5ac204f1d2fcd78275fbded92d3aceea99abe3cb950024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66836 Malicious code in armed-lime-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d709119c5f8c071962f3c0eaa46c66bc3084b6511f49ed9ccf956bc7fb1160b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine-turquoise-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd5fe7a0b3b08c5da63f48da32ac67afa7695ba0b7ccc7f0c12d8012bbd138c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69176 Malicious code in liquid-gray-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69095 Malicious code in legal-orange-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64efc2a57239437175e371224ea49f0db255f8c3ac9d3df3308f6c5523dca27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67727 Malicious code in depressed-magenta-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45feaee03f52f5a82e4ab899d3baa6082ec93744130c6c0cd4ad4a0f8993031e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-amethyst-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8ece93c27c63e0f76bf8e703416ab0507ffbfae846fe6e67f2f4b9d189f6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddad31e43e3421d51fe647897902d78cdebb744104f2cc4f9b48628c9b52a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere-apricot-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf02c29eaad01cd6dd4b664c09c97023caa50715b2a8543fb18f97a8b018c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-emerald-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee452ac1283fcc3857be723197277f26a4c668ed4084910c0a1b646b9a8d61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67527 Malicious code in crazy-beige-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f648c4bb6b80db0adeeed0961f2150d876ec3b3ff39e7f0858912de99284e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...