MAL-2025-76071 Malicious code in vina-lepet76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e142f6f4bc6b1bbe7357240412648b128c4f26dd2dc06a53a87135bc1af38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72452 Malicious code in dewanto-nasisayur36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d85e0f084a78f97796c871ba2c9ffced428ebadbf7888bffc863faa200327f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76606 Malicious code in zaki-tongseng69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e406fe0a77917deac8829511438d86c26c3c7ea1617e9a49b1737fc9b4ccfb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bbd81cfa0a7be6a725480beb606ea3136d08a613dc4cfb77eb0174f26a5d479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential-azure-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dc7741f52f84c2afbbc1e73e367189a4d0ba7f2259373dffa7fffb5183e2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect-yellow-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63fa815acb544e56de6adffe85354d40b099da10d5e638fc3ecc069be6cf0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-aqua-catfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bc6e56f206041a3f1c069ee091f812ec14369fea9fec65fceb83cebbcc662d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant-pink-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b85592e65969d30d08d92baf989861820001848b47724ce557e551555f9f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-turquoise-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef04da432641eb1515c531d24b7fc77a46534c2dddbe4a27c9180655fd642492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used-crimson-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13832c023176c909e82d8a1b702913d04e85d74ff41eb984c70147e081c5bfe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate-scarlet-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4080214e6e792c1ffe5c60019c1f3a37f17e56897a051132d6a40b0cb4ce8c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender-gray-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c48ee5882f4faccba2905e7e33220ce6985edfb24cb675313579e104cc3bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-moccasin-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081041db54ba2a0c2978b0c18d7d167fe74445f2a43e081ec51ce843a1ae2abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued-scarlet-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 866109d007f0d94f2c8e06e818eb6d4607cac3c8e9f721226d8b8a3303c95664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-coffee-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e2abe141cb0e0691f8260778bc27a60eeadb063ef7e6f2aa567908e97e7e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic-apricot-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c359ab7035fa1e4695fb77133358a40d5666578fc07022b35267e0a52db2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69022 Malicious code in juicy-chocolate-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7d68dcbe7aa9c9413536ba4db6b4d277c3f12308374cfcbdbc31d0fe561e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71298 Malicious code in uninterested-black-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedbab79f019684e318fbbc26ef362842470a0b44535c87c7ead478b37992546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70044 Malicious code in profound-indigo-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b977f1d1c9069dc299bc6b4bd8b075bc066a0e9e5352670b0260b8204f6da2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding-coral-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4075cf57e1f6058c5457f207434495282f32e341dd47ebfcd4f447b2c1a5b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...