MAL-2025-74565 Malicious code in nana-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab6b0168e20d6625c5f0f423ead67284c5f9f7370d50e5efcab0cbf83ba61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75339 Malicious code in rudi-mieaceh80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1946e89cf5719ada35511e8c2e0482b5079345c27192cfadc5061d10f827cc1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73733 Malicious code in joko-lontong16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea41d256a0c5b4f5854438a5f2f58e7d2d6623201a3469de9fcd7c2266c3b3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73696 Malicious code in joko-gembus31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ab500475619f6f68fc80f60f5fd00d256b38ade98f163b6dd5920a9491c1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-ivory-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e44e8a5bd7ab03f900103efa518041b363124bc48dde3e97b653f13ccf0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537dbe03284c7d8084295d89f227b56d8139b06a2025391f37abf9ea37cc0d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70663 Malicious code in slight-scarlet-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f2726a87665b474848a451cf5c0736ec22112266bb48a3c9f0b175f0d5b104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69460 Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66985 Malicious code in blank-harlequin-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4ba85309dbaae23d0b6ec75e14d0dfc8255801a95ce5fdc28518464b62cd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious-gold-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3715c2cef506c7aa92372efa145a691627ba92dd8db9a1e7c76e4886e98d800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excellent-gold-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6f454531c2af77305c8ff92e62e55fe1418106c05863cb11510198e7bd0513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-plum-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b82a64bbbd17a0643bf20b70ab634061cbd95301a90069ebb11e9b314e84b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-green-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df995a84c13dd54c1bcbcaea9656dc6aca5a8b5edc7ad98167b5a6137b5d1b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...