MAL-2025-75748 Malicious code in tomi-tumis62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3057ca326ea6f60a470a03a0aacd15c5f296e21610ce86536b8f45d17830c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74661 Malicious code in nurul-rawon28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c5313d65a6d8f1ef24c6e5394fbf201dfa15faf2187490f66bcf17e1887cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe-silver-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc036f4deb089c25ac0a8d3ff3e61e7aa3606b18258b180459ed44dd39359f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in z3fang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38322e5ab9fc6433f089adfa0a2bb4987e3e5cdc603aefe45d1efc0e44f3de07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-scarlet-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a606a6fb02abe788e76490871ad66c6291b14b64a8bac28190b546725fa9f4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978841f80fc19dd53b344847c548bb20c5b0487ac1df105de83e173fe8941438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purezhax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c484aa032accfc0b4d4854c5c4bfc8a38558e9d8bc4e28292d6938eb7bba262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-sapphire-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce618f86f83f81e9f86ea714b2db3d341265031d540d60267db2cd6c0a3d387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added-yellow-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568bc83f8d86902bef6a426fb870cfffffdb138470f82249a4a834c8c6a427ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-lime-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9cf6c729858e417be7ba0dbfa081a6f9996a5fa7d56543177796133fec097e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform-amaranth-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d463bcd8da9c729e9f93e7b0165942b9e1ee908a147e2457ac6436ecc799ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate-turquoise-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce0e2a2a7ff8924301373ed0bb7d97ec93af70b3bd5d9c25d6fd5ab4043984e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-apricot-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8cd334369bf2715f3c0b7fbcf7cdbbbc4cdf710e787729355e11dcba48c5a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby-moccasin-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5e12307fff9bc985590e90c0910484ad9d555b8ebdb12dfd22b8bdeded8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent-copper-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a35835de5af4134ea4c67d8d02888cd8da6b7c4356444e28b497c1a698a554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee-black-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf02a6b8505166c06a5e13e660cf6479b733f4843f4bfb80dc9cbffe4e9575a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-blush-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c12e84617f4ef08f50f62d479e045f9f726d030cc1fb3ba83c6677c6b496d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outrageous-magenta-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc250c8d0a931c232e1f2adf98f48d21735a2e148d71c31af4545f548bf621d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-teal-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c83bbd5d56218c58308dcace51f1922633eed6a2217f362be0452744f099b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...