MAL-2025-75760 Malicious code in tuti-gulai4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcfd6c548f2aedae2629a323bf07f23e4ee09910a501ef3635a94d9f0e726779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76536 Malicious code in zain-sego57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedc775accefe0da7a2307a05a6e1ec2fe1b0eba052d25fa61791667b05f85e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74720 Malicious code in ocha-telur82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b842db0f489419e73b14b39d2ebcf66d56305bffa01c6279d48229180c6883c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76409 Malicious code in yanti-papeda20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b75a802229fb514c541dbfafe812e69a50fde6d6c6ee14f126143ef47a747a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74098 Malicious code in laila-takokak15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eb3db22ba445b4ff76c66d0b6d26a721eec4c83c517d7a0697984cccc999fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-indigo-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9618c7107d6e3b367f66e7e14e210a19b4e02d183aae1b212eccad38c205459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-ivory-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef84e4f34bf0ab45dfe1d24ff80fdd4774aeef57e03da477cee7f62863c3f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable-azure-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612dd78c4e565ba3b918adb5844d7603f4315e178cef5f85797a5b010e134d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big-moccasin-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0327b44b65149ce34c1053a52bc8438d9395b973fc584f3e01086bbe4d4d7a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6627686f131b3f859b422f1c842cbad7d2ba637fc9b6c34b91ba057a50e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable-gray-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67cb484f0274d22bc4c8138274b45d40c5e3bf3400b07c11cd144077b9062d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2799c119d24251ae3ad925e7fb575fe210a6b1e49f7b0d32a8e79ff5c08d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel-jade-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee4982434e81033dd9fdc0ad9ee2e29cf8150729d9f6b9cbeef2cf32fd11795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-pink-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88872afb0ba02951551bfbb343d3def874cb2a9a77c6dab9347d2ae946076d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19869a259e4e1cd31ec3886dde3c55fd0dcb9ce23e5aeff78f8073c10dc40acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-harlequin-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b091a8e5186ab96b4f634e39f3b871adb5fb57766704d1195ccf70b8a3a517f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated-plum-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd4cc5602110887b833f734dec3a67c46678a8a982b0e607e4434b2d330c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...