MAL-2025-73034 Malicious code in galih-lapis88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcbb060ff656e69aa45cb495273fba9229cb64dc6f92b359a699825f109cc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural-aqua-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585d14ec5ba0c3539cb50596d26d5d28a6cd989477deea44ab016edb5d438157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal-blue-coral (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba283d6d87d931e7bd5188f8511c52182824eb285244ec3fa84c488d1fb7742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c2cbeeee81e536fcfadd440dd21b38931a0f8b6a7c222b77531f96636e698f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed-emerald-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b0baa120f81f5641fa72eae2b5cce3891e6b035a0645daa57d38736d29047d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following-black-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad715a4d66ae3db827cb7c0b17b514672bb6b26f076d556a70954f4666996259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet-lime-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 331997ca0eae7b1b4bdea256c36958dcfda3325ca0d31d45675339849fab0bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief-teal-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869320090ff77f6431b14e67389e450a493e328869573fa69884731f5f0e3124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puzzled-beige-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cece956b614c352b0c9d005a66707ea6e0c0bdcab7a4ea32c23fd247e2e42829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-rose-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8663bc5037b5a5700974e2fd4832ced2ae701c52be73c19e02b0ca64fabccaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight-plum-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81384638eab155e8eb446d66d499ce92585f324a6a221d4dcc48a227069d0a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-crimson-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1a532dcb30e8d5c285fb1098dc0c89255879824141082caead2a8335b1f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager-green-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71ead66acda41e32e3806c2adae804e9981d334bdf5427eec522696df9aca5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in normal-harlequin-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1279c9073d05a26fdc730aed3e83c2550c797b3e449eb247965ad6530c368b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed-yellow-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ad03db1e1444b2e556fbca151679c71a7567a020a16022d96d62f6b071b298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilaosyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837028eff0d045702ad5989febb6470c16c151cb3b2402fc7e441f149236c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-harlequin-ladybug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5df7259071f577921ed0dc61954e55eb5bcb4ea37906e489b473d6b35f63ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-tan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419c4f444be457d9c8bcb0836f219b760e6cdf7836078460366dcc45d02194c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liable-emerald-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7bd965d7cac942548ed7441ad208018990c8e418f6de32f1adff789ff7956f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peaceful-jade-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1feaddea1bc30b653668b480992ba4e97d413df94af05a3f700fb445c46c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...