MAL-2025-72689 Malicious code in eko-buburayam77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec829e5ef75006f7dd3f3f10240ee0d881622a16e97b6ce1d4200b159e8cff8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72532 Malicious code in dian-kue68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0bedc73454e04f97d76168eea6f2fdd56b0a39b5827e769d16dfdd8c2d2de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-tek83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a897060b80b4861776d4addbdac0080495ffd4e1767e4fa8d98be7dbee6654c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-naget74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7a841c12539e5f2e081657bbd213b88131c0f657cafc49b89161cd16c4f3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic-green-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d2fec2603c7a7607418a492541a157dda2061bd6a33fbc3a5a045bbcb5f686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed-coffee-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09f4742e713f37154602c5a6c01699e8c3933745bd265ab13101623db6d30c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71007 Malicious code in suspicious-lime-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9e4111f5b9862c31b13fb6ae60bced740193fe0b07264e7267afbf32a1c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69378 Malicious code in mid-yellow-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ac26bd419172fb81571be5abf661b03963bbafd3015cfd1a0bad750e94ac0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68189 Malicious code in extended-red-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867e220d17e9c853b5e08a06944e3f06f708834f9575504ff0ab3cb12b1b15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67826 Malicious code in divine-turquoise-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd5fe7a0b3b08c5da63f48da32ac67afa7695ba0b7ccc7f0c12d8012bbd138c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8821c2cac5fe1aa35260bc2bd9e51b7e139130b9049e16b6ebfe568a86c3f5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67168 Malicious code in chief-azure-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5221d5b501b6be1958cc751bab026a9c4e7cbc844867d99f7f6a47f833de9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in good-violet-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb0e5abc812d4e5187c82df20ca1e751f2b9d5ed63857a757051bccd157e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated-lime-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39d0a67f7b15f1064e5c279642cc60c40664831ea46b8402babbee020bf09654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9894f43c1d3f92ded51016727de09459d31554ff5dfd312380d12ce53f1a1e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-jus14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff57b5903e760bf5e753ccee958a7c1f1aa3f4a5efaea71b42e0ca6fda97640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63607 Malicious code in iwan-sroto43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857cd0f4b42c9b1ba8ec0c178635fea54564b942abbb31946cababc0cfc19fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-tek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02baf80dcbd02336cf9f49143b86ab6415137f6cc26f4565399ab517f43112e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-tahu67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8b31fe02d4d6a5c672c96b937ebee3ec76615a311cce881c8aeb387de49c5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db542353c6bc8686b37f1dc6c5130e7496c9a8f36d3238f8c138acf39e771b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...