MAL-2025-74889 Malicious code in patria-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fb50a8fdc302c5adc5e83270dcdb466330c10093f753f37c7b1c323b66ce3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76562 Malicious code in zaki-esdoger80-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964fee749554c96791a2df29a972547de6dd7d87077f2f14034c720c498e3873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74050 Malicious code in laila-getuk9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec2adfe4a60eda8d4ad731eddba2a09e19e7ec18c28cd1f61493dc18fd85be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74420 Malicious code in maya-rawon3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6f70fb6b9e32ceceeefc5a94bc2a00e822cd815a862d6c5e3883eb5ef23f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72588 Malicious code in dono-ketan39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7009ccaf9b6ba25e8cb43dc6197a6cf375d71ea9d37731ee4570ebdb3ac0994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72905 Malicious code in fajar-teh20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0ace938793c2b71a64dabab04b9cb93918ac1aedd9b8036a71921280f75895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite-harlequin-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d604f8ee5ae1c1f5a06339cd0f8384bdd56abccbc49108a517fdf6e89333f7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-brown-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6a3a5f590915da2e47d168becf2d4e42606df0354ad4c559e01fcb3f575a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-jade-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4731a524c738a8be44754de23ab56cf3e1be0c6e72c343b0580eecc01146a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated-black-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bea73ff693d5c63dfd41aca065d055144b4b9ecca73630c5d38dd85d72a7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled-coffee-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a969d47b898c2b8d2229ac1602bdf5be9cf774a4ed52a6a00aa7b5121debab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic-indigo-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2a0247ef867054f94aa572f42413e5f99ac3802e6898f3390a754b7ee29cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low-blush-fly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbb4f7ed4371db5d697bf33e6ac6b94545283a8118d2b95a848e3f1aa6275b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant-bronze-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50e1faff0fb22820947b556dac9563e6b3da3d245a96213b6c4d7580438a560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-scarlet-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017698f5b730bf01566ea9b5e4336dd276f8c98985677a467194e1065d4f5786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-indigo-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d048d0b9a95f4377351d1aa507722738f99efe4dc01640f006557a1988c6ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful-chocolate-cuckoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d08d06497ff0b4078ac767bdc3324815f5e500a8e6ecaf73f62ba28aae4d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful-yellow-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da962d3c8f84ba3f18426560c437a9af13176d4eaa7cfba9e7daf71d35c648f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward-amethyst-barnacle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc3e38ec60386ac0affb0bc8f16e477e54815b2c19f87e8c29dc4cd00a44ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...