MAL-2025-74595 Malicious code in nina-gepuk78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415c6e4dbb2d4e1fe06dfc2b731df1b2ef82ffb6a0fbc73f27d033ef12b02ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72542 Malicious code in dian-mangut68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b08514ef99cbc03cd6de997abb5839e95785b8dba405b8c7dc3db4724827632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76241 Malicious code in wibowo-jus91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b256d060f843dbd2467ab4b94c890e3fe9790c4e8c19f14e1bb9ef2f77dd0cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra-magenta-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe99f06ff550f1b75c5a4b18a141cb83ddc971da3ac227a9f2b3a2053600d71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-blush-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe925fcd5e35ddddd33ebeeef619f38a7d6a545c59ff6212f1cce72790848b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-violet-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26ceefd9ce75caa69a260fd1ae7e76c587d10f01b4d9b6deeb6106bab27021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67193 Malicious code in ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702b4e04e12a737bf96f5196e72d4446e9f0bee054445a4729eac66b64297b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70526 Malicious code in senior-blue-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3db2a55e0b9720e975f0e8d363ce90f686e5c6926b2651fe4819d11a041e22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71641 Malicious code in worthwhile-blush-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277fcbd96f556a0d28bd1bbb62327f6f4f462bb1686ab32ecab54e6df7538332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital-aquamarine-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58457ef6445f999f27ddc967f41627ea33d2acb24e226ea90193a87722054d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-jade-swallow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded18d3e83cb71125ee2ea44a631c080b5e7b1ee4dd1fe13e130b334e93f886f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great-aqua-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4eeea86226189671bb1dbbdb9b0c46a7591eb3415b02b2220634497f45d6ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-coral-tapir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e96f97a6e6e8f8887ac9e3a4d81e6862cfb105d5471195e540fdc5904a18bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69889 Malicious code in philosophical-white-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e3b1f061e78db53cae90ba7bef928f2339dfc5ab656dcd44f1fbcfdbcb96da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68381 Malicious code in fond-lavender-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aacbd0ebb318ca8d9e70f4e066323691433defa0555ef2f78bcc17da65b99607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-orange-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dfa396aee0f96c408ef0b25d13b4931192bcaef8908d5c06c1b8954d8e66b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb020e40af0d4d4d98a23ac0f24edf4120b4a47b4ec8e83e4b443e6df0eb15b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-scarlet-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df86d700a6f4c873756ba0989618d9bbb3ba5585c9466d7b1be72af40054244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69708 Malicious code in okay-sapphire-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054ea4939d82890351d5f80f6100ee1f49ee3bc145d31cf44f1fcd56c8e4892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...