MAL-2025-73454 Malicious code in ida-sasag37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e805dd5022598697a5262f5143d38260aa92e0b98b4df0ce7340daea2e59267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-ragi27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc9cfced4c7a1a5c18ff6769bac25eebe78f8d86c77ea6591ebfd5d341b25aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-sasag50-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3781b76b24ff62829c1f1296ad8f3105b2397af9065be7e7d624453763281fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden-blue-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18ad4a44059541fa7416639e47b21d2a290bf12152e6e502b126be13b46b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep-cyan-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8649c4869e067f65e35d102bfaec24ac0b85293aa432f1c5d7b4c477294b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-gold-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007882aaf4b5a138a9eaf04cf51cc3405bbd0ca7a08526dcc9827a3d0700e88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed-magenta-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41053f427425ece88e955959a3a95250fb95093665d8c23b6b9db82776319c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-maroon-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33262368c329847ad0488383264617a4631fe8079c77b6108d09f36d14791168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-blush-fowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9069b2112afe02d0668abfcbeb067532c74c19d43f71efe6a4e3fb9f7ca94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy-peach-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a991969653c031e6f86963da44038099d6353d2c5d6b10d647ae1123e3086bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy-gold-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2c65069d17cea1417e66a5e084fa5127e8b014996a7398d5c6b5b865d8f620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8320738baead6af2bf10b6bfd6c36b7532e84f595b033ea209136bcdae8b1d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67535 Malicious code in creepy-plum-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8baa38f4a48ec820ae22ecaa8b008d55080de34e0981a0ad78fc09d5e322a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67288 Malicious code in colorful-salmon-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925b6a676cc54d442f9cf4d9a0e35a4f7f3a2a17d8b587b766a88db3af628638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67810 Malicious code in disturbed-red-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511676de670af02e6d0cb2f467ff620ed019c9bf4023defc8a727341958c6fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit-silver-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e29c7258bb50a74f427771674ccaab7cf9274ba3b186042f543791df74ceffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70827 Malicious code in static-scarlet-whitefish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab08208f1907de867a4918ca21dc4ece89c3d7620a0d767833dce303e8b590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71281 Malicious code in unfortunate-lime-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2f295d39e2e2caf5747d61b6a9b95c88d1ef7c0d66bd1a173d25f4c314ff9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71061 Malicious code in technological-cyan-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487d318366649ed76d5cc8596e8e1f55134125b6b58c116e0ea6979c04b3d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...