MAL-2025-72406 Malicious code in citra-mendut72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723827e2341bd3a5cf8879bca4ec9c64ef9734dc37034560ce7bc91a9148add1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72691 Malicious code in eko-donat98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90127273b0eb09f2799a994c34c24026136daece6e8f920fb11dff7e5992a707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74831 Malicious code in oktafian-klentik69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226acf24bb6717da0c91eb56ae2709389ee7d39e6d3a4be8c6040e64bf9ec93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73745 Malicious code in joko-martabak9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6d5b7f618a9673553c60545d7e5858d30888f16e090bbe8fed8f827b9b534a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-pink-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88872afb0ba02951551bfbb343d3def874cb2a9a77c6dab9347d2ae946076d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-aquamarine-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffb9d68e847cabd89a8d9d1f5442812a71518e49732af855e8d74310d6db703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated-indigo-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac184f70bc0fa482c5c115aa3a0589f49ca2b661907721f8a0b38490e4a520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-ivory-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef84e4f34bf0ab45dfe1d24ff80fdd4774aeef57e03da477cee7f62863c3f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70174 Malicious code in random-maroon-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fd662117256b66fa69595a36e7a7fc6cf2c530fd399260816a5052c27df5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66775 Malicious code in amused-gray-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a4bdcc59360288ca4609014c90b928ee075c1ab06e4daaf9ff377c2e1166a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69572 Malicious code in near-crimson-raven (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f6d46d1b3918c3d65c5928e453bf72f4bd82a9a4da7c3fe60beea8466d0c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69206 Malicious code in long-chocolate-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e15aa5297ca5131f550b695fb3064ca96f51fd43ebcbdbf0770eb02678f7d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70571 Malicious code in shared-amaranth-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44039863490fcc255a016201af932e60a5996475bbad7c06d051879f8384c9c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71135 Malicious code in tight-black-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18471a5119144d36542a2c292eea04960333df2d89ff33aeb3c67a718c3bacbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70747 Malicious code in spatial-chocolate-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3867f73fe31ff6ab661ff6fb9a25fa0be690c124f85e167f80844546d5b0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous-tan-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0d95ed24a0bfbd87441fa199db1ce78886b590e7fe03453bac0a28090b1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective-plum-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 634d063ff0fa04989531ab69f1aa7a98929e12b407277fce692d5e3badc7f328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-magenta-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605344ec81b17dbb4b0984a15266fa660dbc67a062fc0efa64be6706860ed8db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...