MAL-2025-71837 Malicious code in ade-lupis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c5c576146bdb02c849d50ce89667503496d2dbb4e2c8a27275debbeda69e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-botok5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf01f7e3dc69bd66447fcd5eb7573e5ce44527560d45a0e833b1577570b08e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-blush-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12e84617f4ef08f50f62d479e045f9f726d030cc1fb3ba83c6677c6b496d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee-black-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf02a6b8505166c06a5e13e660cf6479b733f4843f4bfb80dc9cbffe4e9575a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-brown-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd80b1d8f1916166077bb35f9dff9956918f381012c3676e79949cd96364cccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthy-maroon-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a69de659bbd1d67cc0b296ae141b015db13d7b5d460cefa45a8c2e6063110b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory-orange-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d6d4e54cd6513574c9a4596e9b1504bfc2c362d3419cd12379bcf1e2a28cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-azure-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47454867cb9c2e6a4acc7c3de75fcfd6d8de2a188f2aff54b1592005a0c4e3c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-magenta-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b31b595def6c450c37843a78b4c48de4d945b8e4c5bf10a38926917fbabb91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68944 Malicious code in intensive-aqua-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aa9acaa84379b4e13cf0f109d1647599e1ee3152114f9734b47c2e4f8544e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-teal-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c83bbd5d56218c58308dcace51f1922633eed6a2217f362be0452744f099b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drab-coffee-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c674f44a135155431ffd530897dde2c6893f3c4ecd3990bfa291a52dff557e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70583 Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67748 Malicious code in devoted-beige-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1f32603b4edd0f5946aced3e79dec68eb332ce839079f1eb7fbc26df4ff72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71774 Malicious code in zestful-ivory-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0edb90e9fe37a3bd4e6ce5fc939d5049de73ce2e652a4934de3ef7d615d2f737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71455 Malicious code in violent-fuchsia-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db25d31374f4d7cd8e1ee8295aafff86ae1d10ea05ddb481db1a19409e7c6b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital-white-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eac7a67c6980ce8a5e0c77caba35bdaaa225a1d6e34c93d0a7529c92ca1b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat-plum-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac523543037977165eee48277cae8ae6dab92afd8fe774c4a4f1553b8a8c78f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-blush-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427fe9169032b942c97c8ad6dba0a30034269580549104fa4935749ce3dfe045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable-amaranth-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb38e006e879ddd07650ba637225d24fb18505b17897ae6d9c247d01567fe11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...