MAL-2025-75697 Malicious code in tomi-kepok17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3bac04df93b660495c2eaf2767c58d6bbd9bcafebeb46d26e5bae3e10fc6a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-moci28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ee12eef50cd51dc0b77438bbcc03b4ff801178ec4bf8296872783837b2096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lumpur94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8e33af5734b62708b9adee3d3e42be9e3feeb77edbbfa7354f31ac21dfdd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ministerial-pink-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7af89a9e0cb05a95cc862b0b9398ed887f70aec8efa404a03efcaf4e8af50cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71308 Malicious code in united-maroon-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1280642689393e13dd5981428b4c0b46f7605d9eedc9a9ef26f5847946e9507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66584 Malicious code in absolute-blush-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e77491026c76953ca119f3b7cad35f2481bf7c3a38fee9baf3632544c5da0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-magenta-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc250c8d0a931c232e1f2adf98f48d21735a2e148d71c31af4545f548bf621d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff881229238be37ef4c120ef2e233eef1c6605a68d69c391451d62fe84e1eb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young-amethyst-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c94c6c90f985ccdf17c8731cb305dc7a3416e773e78bd21936436d4cf8cf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-ivory-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb7c8b0958959a993df54fd248c37aa690f55d4867a5689b8f73eda85c8e99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70415 Malicious code in romantic-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46116023bbb1ed0de03932f05f26a8fc207cf208789f3435fbe88d71b7b7381e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71075 Malicious code in tense-pink-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d21043bd214a99674e2ee428fec309541a8b9e34aaef4ed5b199324c61ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71472 Malicious code in visual-salmon-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83e18fe4ffa1fecdefc914db542028400a36be1ac3ac3a4a8e1026a552ccd03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-brongkos49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3566e43caeff91b1dc35d632fd1cab5df6ffedc20d0f89f9917f4a6cabec1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351e3028fd3037aede696eb398e30004a6cdea17ec3c569f5dfc17f3968ee78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-klentik45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5470017d53473696b1adb637109e249e11b8dd2723e9a065c260acebe17e67a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585f8b48197408bf726e2cb9145bf8300c5f65cfbe542ec86ecabeb5101ce997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-buburayam13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eeed22407687247e6d5ac20e212f78c1514c51afa463950557daa025a647ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...