MAL-2025-75692 Malicious code in tomi-getuk25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3dadf1e1fefc153409d82289b3d84318a2fa11a724cb2ee598996cf505b316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75705 Malicious code in tomi-kue96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22a07a31f8d05a6ae59966b34e0af85026638299b4cabc251f57fdc70878232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75066 Malicious code in putri-tongseng18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b2732e51affb3f05a3ca011a7c0bbe1a3d9306576536a322dd77eb90fcae99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76603 Malicious code in zaki-tek39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd623fe0c44a9769041c4e5b4aa7d78c48226a7df19d71daf7f30830f516674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76116 Malicious code in wati-gorengan72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111a8cc5799a8245c52e267128a05c5073072bf1aa988a4d86e5718445766854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75992 Malicious code in vera-saguer6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fef351232caca9757f2046b20b347a2189f06ca133670e04d4ef66c1ae3a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74714 Malicious code in ocha-serabi56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ec2bd2fa9394b66f3a5eccfcf5fcd2492875d11e363c7ef8234ce4f651d77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-harlequin-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d604f8ee5ae1c1f5a06339cd0f8384bdd56abccbc49108a517fdf6e89333f7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative-gray-rattlesnake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6598dd43d9b88d66a81eba709146242a14e2155b6d2fcbca0cdf772b0e25b3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing-aquamarine-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257ca123147c80961708cd2f39f87658bfc00199fa4dab1f92367bc232f1a101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-gray-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbd0fbe549adf9cfbf2db3df1f64377a2540538a34b3a2243167ae9f9d12805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial-gray-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c909fd32d142c2802b048d6dc34b53ac35191014c9f8c32531145a354a55587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical-coral-gibbon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d269e723989517eb186dd3178d10d147ae6eae6f1fc45a6a9b032024dcca7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic-white-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b8d3a18904e52b57a8acabd65fbcf2b9a39801acf782dddad36a97ae161337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-amaranth-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff234fbec4efc1435b0dbbf3cc98c85233b8866d413673e0fd28a3ef5dd4e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying-turquoise-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393d35f31afa9f857e7a41fdf1ed879f9a7a43575a9b717f0bd01c285f566a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed-lavender-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040259d2266083ef8f612142809c654dadc2265d20e7bac358c6c6ff9b952264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly-teal-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6ac5034c81e7268a96ab9f5ad70e95c30d1e46eea5719600125a92a2191ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct-moccasin-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6c96a1f68885ad20ece30f2e8f676cd5012a6aa9dab83cfc5d1496672a6602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...