MAL-2025-80093 Malicious code in mushy_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaccc2dbbf0a32f1ee187ec65556ab16bacaffd751fb03b3d000bc7e52ff0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78740 Malicious code in helpless_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e3e7993fbc321892599d2462913f346d468be5092b26a64dc21233b9a86993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-serimuka44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0828a5451043ca34c8a8da6b19227072b01285a629dc929d80fd340ad086db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lumpur94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8e33af5734b62708b9adee3d3e42be9e3feeb77edbbfa7354f31ac21dfdd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-moci28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ee12eef50cd51dc0b77438bbcc03b4ff801178ec4bf8296872783837b2096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75697 Malicious code in tomi-kepok17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3bac04df93b660495c2eaf2767c58d6bbd9bcafebeb46d26e5bae3e10fc6a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526405ac1a801867bc7465ad9adc1b5a1631b1b19d2ce53ce747938aa86b163a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-emerald-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6136b56b6bc410caabda520738aab9ab4b1e744d4a5cf0f31352f830dbeb3eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-blush-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6be8e8a611a4c10be1b762ee7b83a9b1948a4bcc3f1ead38c2a3e57a869e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-white-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764b6e412e43ab93f8173f2d4ce2680beae95dac5fa4f020ae41c4f9ed61d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net-ivory-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb7c8b0958959a993df54fd248c37aa690f55d4867a5689b8f73eda85c8e99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-magenta-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc250c8d0a931c232e1f2adf98f48d21735a2e148d71c31af4545f548bf621d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-green-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daf38c925c7c9dd22036475ed9794111667c47434961be1010964340f6edb5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-violet-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a5114f5245158f4de27e939c61bf96712a048d25d332c328cb93b9c4f35b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young-amethyst-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c94c6c90f985ccdf17c8731cb305dc7a3416e773e78bd21936436d4cf8cf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff881229238be37ef4c120ef2e233eef1c6605a68d69c391451d62fe84e1eb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66584 Malicious code in absolute-blush-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e77491026c76953ca119f3b7cad35f2481bf7c3a38fee9baf3632544c5da0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67502 Malicious code in correct-brown-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb98fce074b163d9e5e983fd84da2bb2cffd49b75f4178ed411b8d9f3729778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71193 Malicious code in tropical-apricot-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887d0b8f26def487e9cf4fb4789e2e44e51a6a9cfbb37ce569776bd8d5c34971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...