MAL-2025-73645 Malicious code in jaja-mendoan27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6503e28b9a883d3a183f2845c3462943c68b86afdef24e31ba3dc655cdbcd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74182 Malicious code in lisa-liwet54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa180e1fc78ae5c02d89f6eb168bca14195a3e9768a2c6a9d81eb4b1b0c80746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many-salmon-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5463e708a8f0fb05a6d933ee1535e2ad0708dce53b7628cf513b1787a41ed881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67563 Malicious code in crowded-violet-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65f60d4008850cd36bac436cea2afc12142a5f2900d6bfad27783599df17b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67696 Malicious code in delicate-beige-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df936319edbc12c3d59661d4a607486cd5bf1a629ea290cdef56ee6b70a5b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70557 Malicious code in shaky-aquamarine-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7702dee9be83d87423fee59454f9d89e3800e299f6db8c1d1315677a70c9659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68194 Malicious code in external-beige-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77f5786f8f7f91cc3588dbca2c7e91fdf7560795b9f23f6492a5b437c167591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70369 Malicious code in retail-fuchsia-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fcf01baeb45153fdeb74f5950e864474bca62a8285e3b6678078932d677763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68208 Malicious code in exuberant-olive-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9b8d6192a0962670d25b0f717eb9fcde0fc068d70bb85345189cc0204877d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-coral-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcee1172210f6b588a3facf65efe24a4d4e96f893963b708e593726c01ba5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-indigo-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8e7a201f4746a36f06d37bd0df90483327476b3c7d0e56ffd23f629dff2da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a10754935eac97ba8410c82ccc851606191e37ab2d9777cbdefe2ec315ed62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-ivory-leopon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573e39f6bd7ea9fc301b52f449775fc87f6fff68108c35c3450b012f30133a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief-ivory-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ff092ca6a77baae9af5437a44730954436afb0a2c9a659944ede4fe769ed19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate-moccasin-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9898973edb78f8bad8007848c5fc12536eb74358521049473ac902a749a48806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68366 Malicious code in fluffy-tan-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1064e072c836f679621ff8ddd2998f854114f8b7d997a50cb917790fc9489c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68707 Malicious code in honest-scarlet-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b405a6485b23b4c9caeaf00f00ea0c3ed6c3ee6b1a0dfe9b8516364b10a2be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...