MAL-2025-74615 Malicious code in nina-nasi95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6709b7ae9d2a1b7d84710b182ba03443782685ab52aa054ed7256e5caced26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73491 Malicious code in indah-nasipecel7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721a9ce9e670c58e5d3bcaad9ae6e3642c7de760a35b26b73cacb2ea70c88fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-red-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b99bca911f9c10da4efe6ef0feccd31ff9514dc19d2225f3aa1c92dc95ed125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake-violet-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26ceefd9ce75caa69a260fd1ae7e76c587d10f01b4d9b6deeb6106bab27021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten-sapphire-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e76fcdd80685e74cc5ae1ebe5ec4d33d5cdbb9e31460de67468d027f0fb395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant-orange-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8826d60228e6f32c5ba801d67c490ff1a586633d094726c624571caf02028a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute-harlequin-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7142521577886a8b0b30edc01827c717e23a7b1708c42890552f3a45c24cb6fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-magenta-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d726ef4996a1f6dd71a52b33e3dae51d786ae8dccc514db7c4a94e6df8503d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b100389487fb81dc885eb95b2ef1646f98008ae769bed266eaa9d6dbddd5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-coral-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe22b3f8653ae7c9683ecbb49cca33aa42272237118c7285571e9cf68c6950d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-olive-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a56c7d9be074af501d4c88ba87b8495cdbf0cdcf78a2a2d7eb49d6c031cad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail-black-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111204f7e92b73141c020c30724d2433b1cdb8b8efaa69b06100169c722f6800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant-crimson-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73970a646f5846431243a1e1a2deb0790b5daf424cf0e0f82f7b989170954437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-fuchsia-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb5a4fea134fbf5fdd74c2192c26cf56e7aba0aabcae7e9b9b2b1b18f5ce4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun-amaranth-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7b9a04a762a701688416a17f4fec427f83034a33cf4f2245bcce4e715fc99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable-white-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df69c936687b23434da7f447ecce7cdfe54c3c2c53f1c92e13df34c8caa10ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national-brown-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1204eba7cafa0e4a5fba8172b6d99e52a6665814665456d648b7f9cf723361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theinfore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a9933c0301d96eb46e5cdab34375f88913343372772a77ef8192774d444fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber-ivory-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b502cce52e2a9b8559899bfe3e926ec88418564104d884ebc45fc7f53a07da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large-salmon-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb98e5dd3c3980e4544be863438875adb4f6cf34bae5feb6814243f955009b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...