MAL-2025-74518 Malicious code in nadia-lapis32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6f19abaad5c920a0148c398322d0afe86daeebe461995321eef0940b6863ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76158 Malicious code in wati-tahutek13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64ea894b276748971799a0dcb40cc7afbad6b644c121059c3f9988a062c371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73824 Malicious code in joni-ongol-ongol55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad34d3db0e34048f046b8c08e958458ad259c435dd0cc68b309a1782c7d9204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kolak40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115256f1cf3e5b221a4a28cd6fbf207bc1091ab28d43f7aeb78bc741c1359c2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74256 Malicious code in lutfi-ruwet68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 764077c42b5a071c711e9e500045d3efacad248540949a8d8f450940d04ae3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inadequate-bronze-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53932b71f797bc22b1bde0044f33a0d4b5393fa5e6f2050c4655af034dad98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-magenta-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f07028a9ccb5f65ccbf2c9f075769a86812bb3287abf016d756e4c316cc2456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware-coral-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a68e1958cb77777376029a01e978ce5bacc6e734eb6894c3dad660a237249b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1630ce5f871b68f8a07f00de0d731644765a008c85ec02b6c598e561d89827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-cyan-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fba4236a94f6fb7d1d0519e962cad339bd4643470c2e721d7cbce8c08a31fd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69438 Malicious code in misty-brown-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd09feb7a2a579e7b92748f5f775d04c0c7e99faf8a998b625603fd082a4c101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69355 Malicious code in melodic-crimson-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565d2c815c154dde1ea261d49816bbd8e859048378bd83a2c020604c2c7147b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70144 Malicious code in quietqx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd3d3388386f6abe2deb41e54df9270f8290a6eccd747a368027b7e9d7b6cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69943 Malicious code in possible-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f867f4596ab316b03ddabead61e7acdd383bfdcb7e351b7352b7ee6ce0fe0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70296 Malicious code in relieved-moccasin-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a682ab4d1ee41bd5306dfb0a16503e45190c81f3a96bf8f3b9c4528ae6f8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67382 Malicious code in compulsory-peach-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d7fa32ccacedc188b20b1845c9a223fbca632aab397e19e83210d64eb2a10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68219 Malicious code in faithful-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb044927b16c6649707b6cb828879fe8e932b0f1fca2aa739cb67fb0f7f049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67157 Malicious code in cheap-lavender-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad4c00b2f73e39731bfc44232196d4517bceb4cf03bcf9d70417bef651fc1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69400 Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...