MAL-2025-76409 Malicious code in yanti-papeda20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b75a802229fb514c541dbfafe812e69a50fde6d6c6ee14f126143ef47a747a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-jade-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b724441ee7db3262dae9204969981959d9bc7733b015a87d78597b4574e74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing-apricot-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a8d62412e7e262a9f6ba076dc6d37f4f54922879e7656aa0ebea3062d7910f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lilaosyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13837028eff0d045702ad5989febb6470c16c151cb3b2402fc7e441f149236c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nursing-chocolate-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c82b115c360a1f7de43ad1ce5cd3ccdeeac6934c7982fd563be72885ad5ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible-apricot-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e981ab581b7132e2f6d3f06ed5538db2a5441f15339cd2da29adf40f67a3aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69400 Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66903 Malicious code in aware-coffee-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da6ce34eb3499d4e79dfa0bb48c6ea1070ae979a83510f8c532091541ddaf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67301 Malicious code in colourful-aquamarine-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b514c455a3216392329ba19b6258c802bf5e9f5d2a622124b55d54c5fcfbf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71696 Malicious code in yappiest-sapphire-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5828b01c7e9f7d5ec351e1086771470350cfb7ca3df1a3ec490104bf3673ddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71463 Malicious code in visible-white-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0259b68b8b704b7ccf8ef65ebabf6b7db78840fa9fd3e72ce04b66d9388b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71191 Malicious code in tricky-teal-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71082fbc0cf5fe7bdfae2494596f579336755f8986a0f297b0d2d698f2cf345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71450 Malicious code in victorious-maroon-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5fa46b0f98fb3040cc373260da7c85e0f62b0e766544cc7149088f55e906d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68677 Malicious code in hilarious-teal-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594fd5c8a38202bb0358b22aa4efeb55656649ccead0d1077d7c528a1792c5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67564 Malicious code in crucial-gray-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9c57a7bb6b218ca187bc20ec063d3936b93610bd682674ffe50a871c0abc04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69678 Malicious code in obnoxious-blush-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad78de8a1e68cc2738c87b1969d8fbbb8b9767a1b21c5c84d962c800d2072844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-mieayam85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05ecb1056f4ec78036e34608b30cd8667fe30ad09f5a1850fefb3efdbc89eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b810b86529c534377a5d8c80447141c9391d24d7a6057de517cdf5bd9dbc5947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tumis18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37d5d29a0e6a99975bb9e8f97bdea5bed1618a060122ae9d42d20c1c1ad7a28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-telurtahu18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55ea7d3d4ba2fc83433ce8367b66c4b037a987e4462f46535f2e160709a8842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...