MAL-2025-81919 Malicious code in umi-tempe63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a1ee296442121adec435909aabcadfb4217f1e64101a16b645801f340d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73942 Malicious code in kurnia-bubursumsum77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9bca9cbd59d310529fa9321074544116e4024e51b98258e8d145059fea43929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74840 Malicious code in oktafian-mangut36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a93e90a7b5024f2fd86c7e8c3fd08e5ae27502d29b7190702772a920e518cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-pecel96-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390ae1f7d70f20fb9542e39b69eae1dbc0c60349b3e331498d4e19a662c401a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76150 Malicious code in wati-rojak75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f7677c83ac61e273b0cee178bc76602314bb6ba8e01d69acdabaef7cd8cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75130 Malicious code in riana-dradag43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db52fc0ab919db438a0c6a303e805706b186bf154fad6cc808bc2cd007c00cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72900 Malicious code in fajar-sambel91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdc8a78d47f1b21377014269da96cdb4f0565d8283eeda09dc011a3dac8daaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76016 Malicious code in vida-kentang82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2725c27921924e4a665044ec0a0911ee11ce17d64b4d1b27dec45d67aa480b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69569 Malicious code in naval-pink-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c3278f2135551a4f1647b59c02b49870cc133d436ea8577cf18d2c34cc4604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-cyan-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fca3a7b462db2e0c9bdd74555f00f28c29f87cfdc0f55b424281c3bd93ae4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69521 Malicious code in nakajio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b3e418efa6d722ebd2fbb14e98f45494bb15da905ec813fbddcac9bd57db85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68354 Malicious code in flaky-blush-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431769404a9a8f35c84ce32881d885e272581911b60c40bdc8a75f8b544a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71661 Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thick-copper-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade15896f0bd0055fce68f9c21289c67fd48e66d7dbd92f2dea6367604d98be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68510 Malicious code in genuine-salmon-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c08513caf509d1e88c70ec771b2d594afd96e10aa8c37678ff9167964070f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-57039 Malicious code in joko-lepet85-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5c23c1ba7d0f729dcc3c7bbb33e566855ce1d9c0304117a39272f13fc1bf60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50887 Malicious code in bambang-jus39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae25e5a9258fd0c80bed5883f3bbba3f6747826bb7c46b3a85130827526458 The package bambang-jus39-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...