MAL-2025-74381 Malicious code in maya-bika37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67aa5d7260a6668ca9f1225c0d84fdc5b821038c2e089d2e7bf4d17f62c6e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wealthy-maroon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619f627e06976278990c88f685497ab5bfb64a61c73c3e913a96243811062f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66604 Malicious code in acceptable-lime-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a572d7f04fd0a7fe7aa940662fdd060a0d189c46b1a8641a80f7bd02ea325c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-coral-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d549ad13e181b5c9e4be49b56e282f6223e26ec200e8fc704681876d614dff6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69666 Malicious code in obbaman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4658ef14abc76bc71e8b14c7a6d763a7718318be503e1ea398715f168a5033a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67196 Malicious code in circular-orange-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3845e5081d880790843d44c871664ce82315ebe1913fbaccd6511a418ef760b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70388 Malicious code in right-moccasin-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b37e3b54192bbbf7ea8d394e07e8f4eab50bc3269da74f0cd0f4337fe0a711da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive-salmon-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0185e51b406405429ee641a996669d82f088383baa269ab237f7d5b8b2e1c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-azure-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80d114818626d16882bdbe142903a5ba9bc686855231096634cf19db7980cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming-olive-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e975eb1ebeb31a56ce0cb074c6bb45aef498c7fd8942916e743ff604551a5e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-apricot-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 082e4c67352d300b702327e9ea2ddef8606b7ac84f02e9fba0b205af7a16596b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70743 Malicious code in sparkling-apricot-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2731b94183927d512826bf9de6b1d897a9b1dc88db0c252ae7123294f0c1905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-kue65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8165ae0163b1b5bf2cec8df5ffa5fcc1e890300a38451565f5855372c7aa426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63356 Malicious code in hendra-kentang48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65634b59fcbb5355a0ca68c7e72be824f84270fc2288a5653df91d97b54d4de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8038f4210e458e15d5904b0b0984d42ef145cf77e29b99ac0fabff0f31307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kemplang17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c17b39f931c7b05cf993a34bd815c4f5a341780368616c6c023a602ba71c1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64904 Malicious code in putri-kue92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f85709cccdcaafabc6ff6c3ad16ec639473fda6f2fc18bfd32eb57ebd3a4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62642 Malicious code in eager_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbf23b854ae5673eb1fbe4e129162c2dc2d803460f4a4ec35baecd7a90cc9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b725f2d5df8a69d01b924d884ffed0403001b29a385cf7baa085a90b49675e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61242 Malicious code in scientific_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c2fb2be8421d3a2efe974c826275e0bebc6ba12585bcf6b4b34a7d09c844f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...