MAL-2025-74049 Malicious code in laila-getas76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa661e370bce6af76a133b052f0bb0ace0cde6b22d3378ff44419178736da70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-ivory-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a90527d379a0df7ca96165babf7847f889318981ba2dfc6ec1aa164e728e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic-plum-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ee3638c036a24c862b57966826c429c8628bab3db74c27ea8dfea4e094b2c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible-sapphire-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10fc9e30257e74e0dd0d5bb736f2a0465f7ddf15e06048bb72298d89c33c418e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69451 Malicious code in mobile-scarlet-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c14a84fb9a6701fdb752cb9e968e7b6bc8dfd4c675729f3b6f7b352c2b3c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed-gold-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3d86ae26b4c24f933278fee6203c4028c3e36d6f71477390702a8ababf7f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70580 Malicious code in sharp-green-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f039ccd40a517295f39c888f7e5523847e53c5c5e149530685d1b9f8812570bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring-azure-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1f4c9cb920d4083a01c8a45d49963121b1ad809256d25aaec562aa99d5e45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensible-ivory-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325d56ae75be39c05ef47f3d087a3582d4a13aa3374373b6c06d044ed48a4bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick-yellow-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f17db88e61b15f9b5fdfcfaea225d066c96b38cb1b10ed234a5190b0d9bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative-silver-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458bd1e9bd80748871df565709d15bbc7067bd00aa949e954887475e903cb0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slim-blush-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427fe9169032b942c97c8ad6dba0a30034269580549104fa4935749ce3dfe045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-turquoise-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70239 Malicious code in reduced-peach-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675e3dfc12e411d07000d63eef106a611b3f5eec01d4c038650f1fdb1fd115e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66767 Malicious code in amused-amaranth-rabbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee2473499d28da5714ae979c05142de9c12641c08508952f3a5b973d5179abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70591 Malicious code in shiny-maroon-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25534fd8c8d553b8e07c332302c3fde58c0a4639305c40cf8cb4b4cebbe05b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-blush-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f867f4596ab316b03ddabead61e7acdd383bfdcb7e351b7352b7ee6ce0fe0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-lime-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414beaebc86c65d7fc660622dbec34b1bfbae8e285b052a5be658083a188618a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...