MAL-2025-122768 Malicious code in qori-lupis10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28242b05791458ce571ef91b56542a570a62f260ac065a9ffefbd37a6a5d2f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119418 Malicious code in dewanto-otak-otak58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36ecf9801226c54ebe4acd3f203b61c84fb7abdd8708e9e80acfbc6cd2f8810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119503 Malicious code in dian-keraktelor100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924e4092a31c87e6d91a31b392b3c844ff7243f7f05e27355364ae0a468aecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123429 Malicious code in surviving_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a4e7d37de5cc2d2236bae25c4b96e42b927ac607f3a1cb28130a27559ab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122234 Malicious code in ocha-sambel87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdf62cf4e5873edee0a9c0bcd392ba127e3a7175be9b13d81864572f89e5b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138578 Malicious code in netflix-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 711ffa8c0ce9379a63de3ef137c0bf569750b0d78159c94ec77e3e25b5354050 The OpenSSF Package Analysis project identified 'netflix-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in yanti-sate9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c459477926566773cc9e5f9d3b57a7adc1acb19072912de50f4a2e5d537a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kacang9-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a2968ec8266d90d55aa64c181dc769761a139aa7084d02460b29ccfa32ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9ba900e9f787fa0dc85309d53bc744bde2cc3976d9bf40761caa5cd65b2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disciplinary_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349300c6927e55652c3fa0fc99f6aa1db87a21ed5c7cc094ddb31892b1073c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-keraktelor78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e03f010b3b19ed2da3cdf7f8e0595aeb65b172032862e420760d0b10f7f0e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e5c48c48c217e6a7db20516c1574d3d7e48950d987e85e281b240d1cfaef88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mangut30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606494b94023b4336db199a9d2b9239d0c114420a39b5b5d05a0da3ae34194c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-nasipecel38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a70c6706461525b12bfa3f209bef9c9bfa7affe834bbab1587fd74a0f7e9dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-empal4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9311be441e2f8010435f2a84c723bc482f47fcdd2502dba0f313552b69cff468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sate22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176e272748f675a55fa42e8fc8abdff9a1a9075d45aa9262baf6849e6ed622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangut53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0807829606e40f3a27e90c16022602e6e05e2e382fcc92ff3062e00f7a8453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kembang36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe92c23a8faad6e033b1f979600d6f7cc4314d64aa473b5efd41b6a64f67cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09aca4c0a2a403ca2fda114d720a0840c1f106f40698db58708f59fd4873e603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113775 Malicious code in experimental_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3fcf8aba1267622c1361a6cc8e316c3643cf906d9cd559a8d5bbaf96e9bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...