MAL-2025-128494 Malicious code in maman-gorengan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68307a69468bc1a8f6b3137e8ce834390518e57112e7d7feabeb34925b65c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129219 Malicious code in oktafian-kue99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec46295b673cd432a9009349ecab86add55e49b0383a01f034422b40edf3ad29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129848 Malicious code in rifqi-moci84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c15a93aa0702a8a1fa555932bb4b9b6a7bef0115ff4bf0e75074751f9df466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c46609c2a0dcdf195d4d210df01bdc1592c088917729d98228bfbbee03861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f2f847bffc9738411d7723dac0135e79230adc42b1546e1c95b28ddb5c7276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-wajit85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c32214699f7561000ed0d49e27f89a2d9c87d6121e1787b1407a21ec29cadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93605

Malicious code in zaki-wajit69-breki npm...

Malicious code in lisa-semur97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de8f3268dc806f3ee4ba6b98e6b80f39e069bf74ee9abf89924fa98b095eedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sate89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b314505c489be8eeac53331b3fc994791c7348ec4a4e1e9e056841b1d29b6280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-nasi72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26b862fd0ad1290ede518e5ec813b3670c6c6f7bb3b2d8ad58ee91a48aa6830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-botok14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9274173c4d0a7c427bcf7a4da6a74624bae3615a17b7f03741b018ecb4868ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lumpur70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f988924b4463210cacbea9c9127190344a513c5474e9a188354d041e4e9ffb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-saguer70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c1e7f74fee706199c6c67f7afe9c786cd1cb65dd344b778051a796657a1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119877 Malicious code in exuberant_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d77c9896a4f4cba95720386f6dc5b2e5d162099d362e60e081d1de32983560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122021 Malicious code in nana-lontong61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04664d743975baf9d9a06411eb23835b55cfa9adac9ee9f0ad9fdbdb905d8cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120961 Malicious code in iwan-tempe40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adeeaaab581732958d7eede24ab1d23d56b5b83760f1294daea9d741032ac3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124277 Malicious code in weird_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76636c7190805c9320b5f8576aa13366ba94d50012bf44a4e1cd78478e03de10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121850 Malicious code in military_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9a8f65251d743b083cdb2d9248e2decf816ce5be817a23ed38c3dfba9c98c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119656 Malicious code in eka-kupat63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a4faa156defa34642bcd22d08d4988c8e73b803f852a99d6ac8c18868a83ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-ketan11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753fabc1a9dc9d7297dded4d538892223cd2e8e5d73349d154072807e95b68fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...