MAL-2025-74974 Malicious code in putri-gado-gado9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7554d54efd87b6776fe4de016f3fdff91bde178e5f84fb5aa7416540cfedd84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72694 Malicious code in eko-esdoger76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ec8355d6a51d14cdceacdc35cc24439f20b22199260e160d746bbb92d4019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-beige-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c63e4d1616c090b0fc0aa18a9061adb7b30678afc1abbaf9229236d40bbb953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7615b7562d0196f4f8b46c7bab2f356fa89a648525a96a2eecabdb68ccc966e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-apricot-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d445e35e97eaf4e0ed924b9ca863f6f7f83fc3831264de2869759d67bd20f7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor-green-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983200543d474433cab34d96babec4b386aab468cbb7f7dcc71022b577874fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy-indigo-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41f8572ce03227c17332d5be6fcb4ca0140d75e772c9a24281d613dd3b73170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred-brown-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8535d9a5cabc2038667a723f22807654c370f2c1b0b70b7fce54dbc945c68f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36676a6917899cbcf868109ca22729546c515830ac75ce5eafaafcc1bbc9537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-teal-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bcd445a3a507659b19a1e581d1e5b77ec6f7cd784f03e2d50dd0aefd4f109f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous-salmon-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2004768df0ca8c74f5bd40db3786d809ff47836f9e9ba0bcd47de660ec5f4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male-tan-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5893c029ea553ab732d68cdcec9bba1755fe82e5ec9ebab659a84d4cbbbfa28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written-sapphire-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851f0018689a0b45b91d876b8973f078fdb87084a370d99c36d8a906465f906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-blue-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce3a6b781794cd41a53760395112e1010a0cea5be63f15b2bcdb0e9ea03e6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely-gold-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 385f65114f12a317ddc73f9772aaf353ad97156059bef28f5130eaaa0f3b4780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless-purple-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65004d9c2a5e5e5655e398ee3ee44c7e3d14ef589f23c4d34c6f4672b130bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-peach-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c484389dc4509b994eddfab5d5653d408d05e3de4d9c978875163980b6a4428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68001 Malicious code in eligible-emerald-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b268ae17446365e054eff0f0f10ff3832de2004fa9836700cf3c815248667180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...