MAL-2025-76253 Malicious code in wibowo-kue96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ffc34764cb113b102a105d1933acc100445b8a66ba6fcba22d7eb24c319d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75879 Malicious code in umi-rujak21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f0590a2fc65e12e3c5c4a15e3df70373bf87cc112a1d4ffa8a36a500981203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72402 Malicious code in citra-lumpur39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2421b2abcdd5092d2607c2708fbf4681aa5dd912ea5434265753ae5e574b09c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly-brown-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b143ce9e77d28edb28ee9994844f9eaebc88fd306e41ed944e3f79925ecd7e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67749 Malicious code in devoted-peach-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188dc51ab6e738d750a8c1eff7b6b82b1f7c09884980bfb9590d97331e067637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71674 Malicious code in xenial-magenta-falcon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bbcf1f7d2a2d97796895bfb1191d34cea382c199051a16d624f0b92aff9f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71076 Malicious code in tense-silver-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc77ca8a118fbec40600961002428c803c6f635da56982b445c71a91f1a11bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar-sapphire-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53808f5bd9400c4f2a088bd6d7e0ebba996eef66fbe1c380418c50f734eac4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative-green-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7d76f2a7194ec968048ce9d89e5182e8bd1e37ef1505ea1dfd35639ed22f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290eb5527ba978d9f913d813a34e27c4b6df326e5a2f5459023cdc92578da80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-jade-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45c4b7b6a2d5334851c5e6ae5127ba4fa28e23c7b847c3a4d57bdf7e058ed17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready-salmon-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e6ef8e8554870ba4f8154d6cf2364a67a735f674280d8501e0ae9b6b53717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly-tan-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7337333e293ce3d1b7f0a5080313a4c49bc3a1a8bbbd0c1ef5c6c05997ea5ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69805 Malicious code in painful-plum-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086023496572a3e9e6a529d343abce1623bcf1759063f3de65f389d728c610fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71596 Malicious code in willowy-peach-earthworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deae21e7bd121c436243bdcfdb66735fc3a2eb51032dd2a3d2c8e17d8c524acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70072 Malicious code in prospective-plum-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23367ec341fa7d5743420f688d03a77b9b8ba1e189513112275bbf4437882fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-lime-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38fec78d3735b58ee0cf18e6bda2a2188bbdfb9c911ae3ad3d4782e365220a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-chocolate-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbc3ab96e2063e4de4fdca12a2495c0f90f717183b7425291107897c8042595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...