MAL-2025-73681 Malicious code in joko-botok45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cad29047f8aa6a43fc9d06778c3df433d8d151adf6bd8fddd2340657a40b895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72332 Malicious code in cindy-donat34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1c2000ec9fa0ab49a2facc8ecc3999859f9719948cff8c50cd9d75acb9c3cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74718 Malicious code in ocha-tahu71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef6a83190423a36ae6420767db9f4db510f910d4a0b8eaa02bd8431cba607d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72756 Malicious code in erick-mangga49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c54bce11b273926aedfc5ba721530ad3c828461ebea7411d4af4bddf4a2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71887 Malicious code in agus-martabak79-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ade71d6579adfd5d121fe5be5c2d8297e0de4bf25bc94d0bb7eee1e08c79cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75135 Malicious code in riana-getas56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a18f42f36b799822375b742d5232d1c2a995b6cd9179adc2acb629f07b588f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-dodol82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d045738e246b3960af817a70a9f3916706121e3f4e27436da975d83e65b5dfa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubur74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532ede73bb8eb7dbe0dfcf6ec62345aa05d22516ff43ec802603f22c9507617d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-wajit84-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3abb01f27a8963577b480043cd33ff3001b0408a1e8d9bbdcafbf6494b1ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-menjes28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c85f2b21e98f0ba3e5bf1bc2435edceead177f4b90f1615959387f91391fdad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-semur71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f8f5faa3dd6606b64feb9a6b26faf24940889dbbc9969a00187432c2e64ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-saguer1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039c6d22141a7affba1091e1a9b39a5b6e3984519659ff06a9590abd9d912fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lengko31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45e19b77a9b4d36e4d00110c25fb9a05b74302208dba310f4f082cc8834d161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd-black-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72133c33248fbc70005c559d2fa8a0257a643438ea65a2bf47e4ca8209579d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round-indigo-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fe5ae50abbfb1e3aa57661be87f140e791b39e674d918527f8008225a5b038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55188

Malicious code in continuous-turquoise-sturgeon npm...

MAL-2025-70205 Malicious code in raw-aquamarine-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc262a2681e9145b4bbb1cec95da555f9f42e3cc28730b8aa42a42e8a6d957b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70976 Malicious code in supreme-copper-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4267bf2d87aa42c3eb7380b119e1a2018568d108a500d9833350951a5fe9a300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict-copper-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5802d884d220788b3b3df9914c7795e687d142fffe8f5a56c79e81a509d224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kanborasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f47bee1abbbaccaf40bc4a1f476f9631d2c350b759c831ed202be0f6857557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...