MAL-2025-120450 Malicious code in hadi-telur15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70057e429afded8a160490b859444430462c8aadce43c17853eee4457895edd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124588 Malicious code in yuni-saguer61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75e116ee301f7522c4d57ab7df56d9face25f793cafd3e8cb3d72d507088ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123007 Malicious code in rina-lapis72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fccafc70c95098d117473f7c19a056f6c31e25a17568b5b1361607a1846f7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f5ff3abbef3f397f941417cc0c53b3fde2584cba9d0efebf184702e1bab300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119589 Malicious code in dono-tempe66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf69711bdde9b09f302223b122ec1ee6aebf866bda100adeba6ef5234dbc74af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122700 Malicious code in putri-saguer46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22a4d36ac1ee0a59a30c52a37de085edbb4b41d78631552815141acde16aed4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138578 Malicious code in netflix-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 711ffa8c0ce9379a63de3ef137c0bf569750b0d78159c94ec77e3e25b5354050 The OpenSSF Package Analysis project identified 'netflix-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in agus-tahutek20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd32cd0866b4fe9b8b8d54e2cde50d923e0dca4594930f4159ad8ea2540f2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-mangut53-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0807829606e40f3a27e90c16022602e6e05e2e382fcc92ff3062e00f7a8453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-naget41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbe163801ecfcdaf03176fe7bcc1f863fe6616af8bdcd83a75e196e772ba4ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-mieayam79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657a45a7cd9f9bf4a4c945240aeb7177ca3c138834cfa2b344d4f083b7002ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-esdoger17-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bef8dd3a4eb25d55a39780f009bdc5b0cded35f462482d9228b5ea278ac8f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disciplinary_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349300c6927e55652c3fa0fc99f6aa1db87a21ed5c7cc094ddb31892b1073c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ubi41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3685ea4651a23d8976becc47cff182befa3740fcf3a01038b30979edfbad7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-toge26-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9896a4b28bbda43b6df6702d9fc591cce02981cdc3f287cdbf4fa0055564499b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-klipo10-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1546aa05a86e9d24a1aaa0eb1e9764ae360448fc1f6bd37ed791dc4794c0989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e5c48c48c217e6a7db20516c1574d3d7e48950d987e85e281b240d1cfaef88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-empal4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9311be441e2f8010435f2a84c723bc482f47fcdd2502dba0f313552b69cff468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gembus32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e31172cdea7e5cd079fed0a4e6608f66a0cd23b1b84f62b01e44b154f5c0bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sate22-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176e272748f675a55fa42e8fc8abdff9a1a9075d45aa9262baf6849e6ed622c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...