MAL-2025-73657 Malicious code in jaja-ronde67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842b18f4669b7a5d12fd36a554861c731f06f72c4dc99f00dd9dd6616b68d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-tahu17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18abca8f32167ea8edb287e3bcffa385feb95b63f3e4fec0af211fc2cfa429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74889 Malicious code in patria-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fb50a8fdc302c5adc5e83270dcdb466330c10093f753f37c7b1c323b66ce3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72163 Malicious code in bella-tumis15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5154dc933db6046a8ffda693e23246042a2bcee14f6646cafb7fa30ba14565f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able-amethyst-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a59109d62173b519cb9f936dc7cf460bdc30c2733353bb367709c89a5af2a52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-ivory-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e44e8a5bd7ab03f900103efa518041b363124bc48dde3e97b653f13ccf0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-tan-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f75aaa18f93d307754913a0231665bd25436ae1d9674242873f10bb395dbe4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-blue-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a3d8af2d905f4e3342da1bdd3b70ea17fe2ae13b5172149afa8c27872929b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional-yellow-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed80c92353a50938d0de7980a6a259bae464fea0ac6ef70f6d887fb1435854b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-gold-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6f454531c2af77305c8ff92e62e55fe1418106c05863cb11510198e7bd0513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely-coffee-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888b7793daa45c8e25e4ba636ceab1f3442f3e18ac5a06219afc6adc5ff70ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-green-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df995a84c13dd54c1bcbcaea9656dc6aca5a8b5edc7ad98167b5a6137b5d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-white-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39d868a57c2fbdb55e161a2b5b1c898979009a06a341429536bf82f7e02173c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...