MAL-2025-75217 Malicious code in rifqi-nasi91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ad6badd052249edb276e94ff53f3c8171a4da02aa207327fddf7e35ec82587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72497 Malicious code in dewi-oncom6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02971b2ed3648213213ee5062ec4c58ea89993860f2e84c8616fdd564351aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-jengkol46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c1a61f2741487d5706685dcaf1fc3b4338a7aadd298731c3b61b956b584b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-sasag37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e805dd5022598697a5262f5143d38260aa92e0b98b4df0ce7340daea2e59267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71807 Malicious code in ade-brongkos5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9439eb63ffc7dccfaa85a744f74dee3caf2e4f4c9787237b77aaab024ea9f202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious-chocolate-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468c285835ce5c45091a68e5cec542b5d18b1c70fd94d68a08b2a8f7e8b06442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035391b18ecb6b6da7a0cb471917359ee2c437aa3fdea6311e561e2665844e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66836 Malicious code in armed-lime-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d709119c5f8c071962f3c0eaa46c66bc3084b6511f49ed9ccf956bc7fb1160b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71734 Malicious code in yodelling-plum-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c03d678403fd871a5ac204f1d2fcd78275fbded92d3aceea99abe3cb950024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69101 Malicious code in legislative-indigo-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8965b582771cff5098b8c1d405b346a4175b70278bbed8297ccc796d310bb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67230 Malicious code in close-apricot-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d421b61fdfc98723e93dd39ac5fdf28fc283cd4492a447460082570174ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71781 Malicious code in zesty-silver-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe030c3f7df49f8eaffae28ebe9816e3a9a9a769b5c1205af0642d04cd15c3ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine-turquoise-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd5fe7a0b3b08c5da63f48da32ac67afa7695ba0b7ccc7f0c12d8012bbd138c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69176 Malicious code in liquid-gray-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67727 Malicious code in depressed-magenta-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45feaee03f52f5a82e4ab899d3baa6082ec93744130c6c0cd4ad4a0f8993031e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69095 Malicious code in legal-orange-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64efc2a57239437175e371224ea49f0db255f8c3ac9d3df3308f6c5523dca27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddad31e43e3421d51fe647897902d78cdebb744104f2cc4f9b48628c9b52a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...