MAL-2025-72352 Malicious code in cindy-kupang30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8cdc955fd1c71c37d25a746e45c1a87cb4a556c83248dfac624f85f604d745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75879 Malicious code in umi-rujak21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f0590a2fc65e12e3c5c4a15e3df70373bf87cc112a1d4ffa8a36a500981203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gaplek1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1915ec43353a078057d15bb5c6b3de4e1d92f4175255bc26643530f6fa997e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly-tan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7337333e293ce3d1b7f0a5080313a4c49bc3a1a8bbbd0c1ef5c6c05997ea5ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly-brown-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b143ce9e77d28edb28ee9994844f9eaebc88fd306e41ed944e3f79925ecd7e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-emerald-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0205f709eb05026eef5b30ea9330dafc4b92e5ee1b45f95368adcde2be3083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290eb5527ba978d9f913d813a34e27c4b6df326e5a2f5459023cdc92578da80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-sapphire-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53808f5bd9400c4f2a088bd6d7e0ebba996eef66fbe1c380418c50f734eac4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-chocolate-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbc3ab96e2063e4de4fdca12a2495c0f90f717183b7425291107897c8042595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready-salmon-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6ef8e8554870ba4f8154d6cf2364a67a735f674280d8501e0ae9b6b53717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45c4b7b6a2d5334851c5e6ae5127ba4fa28e23c7b847c3a4d57bdf7e058ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative-green-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7d76f2a7194ec968048ce9d89e5182e8bd1e37ef1505ea1dfd35639ed22f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38fec78d3735b58ee0cf18e6bda2a2188bbdfb9c911ae3ad3d4782e365220a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71373 Malicious code in useful-azure-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bfc30d5a463b7cccc464c99cf73c70eaaaa12c2e9f8a1e40441c81a80c8e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71076 Malicious code in tense-silver-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc77ca8a118fbec40600961002428c803c6f635da56982b445c71a91f1a11bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mild-lime-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ecb0f1d85049faed3331514d39c1660a56d2f03feb1f2e4099457d65b9bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71111 Malicious code in thin-moccasin-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c6ed0673763327ff5790a48e89e08c43e9605263db05ec72c99606ce84002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71596 Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...