MAL-2025-74243 Malicious code in lutfi-kupang44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7963f397ec7155bbbda4f0b92e6f0a080e8ea5a4781cdc16a4e6ba37e0316122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76654 Malicious code in zul-takokak96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00def8a9c2a79f94de003f739f1480c3db69927ff019c710849084732ba77198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74565 Malicious code in nana-martabak91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab6b0168e20d6625c5f0f423ead67284c5f9f7370d50e5efcab0cbf83ba61d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73238 Malicious code in hadi-lepet23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfc1fe56c349f49fbc79aa510f392dc3e11aaf0b915da86a96c5fe2fce495e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76156 Malicious code in wati-soto68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fc209179bb884f40e384e7777c8fd5b4c318ea19516b5efc51b0c8989f7ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74785 Malicious code in okta-keripik32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa48d65a1a753d2d75d9ab8c2d1f11f33126d0ba610a51cf04e5581caa388b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-harlequin-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d604f8ee5ae1c1f5a06339cd0f8384bdd56abccbc49108a517fdf6e89333f7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-orange-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bed840e0a98c6c82c8445f0a7a0e955447706de7a631f3be46923f13ca4691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple-purple-koala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5692a08de852c68c3a0e4375acdcf1665c25b39a9d643b0e191fda06b548f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful-yellow-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da962d3c8f84ba3f18426560c437a9af13176d4eaa7cfba9e7daf71d35c648f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal-violet-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3677b124232bf15dbc7a95bc282b3ac80574b61621475bc0e76001d64550bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed-lavender-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd69e490ab0caba8638f725426efdf3a6177a6ea9fbf8bb920e73da61aaeca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic-indigo-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2a0247ef867054f94aa572f42413e5f99ac3802e6898f3390a754b7ee29cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-jade-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4731a524c738a8be44754de23ab56cf3e1be0c6e72c343b0580eecc01146a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-black-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bea73ff693d5c63dfd41aca065d055144b4b9ecca73630c5d38dd85d72a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful-chocolate-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d08d06497ff0b4078ac767bdc3324815f5e500a8e6ecaf73f62ba28aae4d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63643d7655610cc95d540efaf387f2baf3c43abf0a376540b44b74f2e7b9b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a969d47b898c2b8d2229ac1602bdf5be9cf774a4ed52a6a00aa7b5121debab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...