MAL-2025-73994 Malicious code in kurniawan-gado-gado2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec219dff7d312a311cfff911b7c1ab31d66e44413b75b3d63e0884c8dbf76be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72918 Malicious code in fauzi-bubur70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f244424025bdc8c31f690f6b6aa9485bd5027772d597c9e7e87c45bfc7d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72645 Malicious code in eka-gado-gado71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f187ef4b7ad9c28f0ccf5978023ce7e3325649fcf5cc8119a2f231ddf058f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant-white-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8019c3b2dc3561a9cd6d593f2510d9dcea7f643e0925aadd5f390f70805f6c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-apricot-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9af5f501e85007259915f179c4faa7daf0d29f62f162369b706ce2f8aa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual-black-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a394818943d79f41fdc56d4fd7e146087403d867fc1b6fad3e586e386a62848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-tan-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1eb809e8654630a97ed443fe4c69a6327c99d18c715c4c2c3b7cae2dc9bcf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in divine-bronze-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46dc5d35f654935d387094539a1dc34108442bdf966855c0d456eb70d5a0c8b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-amethyst-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc41adc4b88f86783414b015f2d078ab908b75c78ea7e977bb3262f6f47a3322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67462 Malicious code in controlled-chocolate-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d38bb5101ecb2fe4779b028380da698f7dedc4fa252a78d2e1894af203b16de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative-jade-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90542b7105c192894ed2ae9dbb4b05cba2a5ed0eca933fa5540056a463ebaf4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female-tomato-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf66d89a5fe35f8e5d283738c9d1a2f46c3a30e201574e499dd5c11499b0c667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling-salmon-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f15726de6e2ad29aab11659f5261364fa17c58a75786fd919a69de2a427349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure-blue-mite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d307e98103f7c3049692d8cb71c5b7d7cf3fd2c8c041b23a518a1573a7e551be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67435 Malicious code in constant-lime-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80612f031df483c564f9aa4bc20938e434e0f663fab74bfa57d9f28719e8fcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66824 Malicious code in arbitrary-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbbfa978e228cbef1cea3b0e9dbab1cf04eb98a63d54d4daeb22794fc55b6441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-ivory-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416d23f324b0978398afe760b31f554fcd5bdb60a1a3e19cfbee364c83e3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic-silver-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204aa8a43f8fb421f77a5fe30b1d9853963778f322a39e7283f6e65da503ef47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-magenta-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9385e54d1d98f957ca20fb4494ca8768cf1b4020452177770316d78aa5e9f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...