MAL-2025-75450 Malicious code in sinta-mieaceh70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c11dd1f72d4b096adc4871a1f4fe99689e1b44c5142c0fe35e15c22987bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72990 Malicious code in fitri-nasisayur18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbf4ef9562edf942f84cc4ee24af1cc77bc22fcd84fbdce3d573c8aa3fdefeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-moci28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d32ee12eef50cd51dc0b77438bbcc03b4ff801178ec4bf8296872783837b2096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-gembus31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568328418783e04f4363475824be0d76e2a889490ac33eff1747b3b206359bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasipecel53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482e24f6c5d407febe2f0d0aa538d8feef89e0a81365422fba16462573aff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural-apricot-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05a42ad2a44ac5cbbd139144242c34f882e797dbdad51b3d8c2fe7a7402794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable-lavender-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd9be8ad45ecdc5fb808de5f50e185f46e9e873740a0947dda3e5436296f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless-ivory-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 098e1aa076b0f4a00371d633555e5c48085004ca3a506a4e9c0174b02da428ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current-coral-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21642c22551faa3ab3edc8f25a15196415770d5f130ed439d876ba545b7717b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing-azure-elephant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c6ae5c006a8488af5a10d3d18c58e01a0943f5857d3d073c2f974fb794d401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-plum-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1e2e35e6e5d0b336e7b0a4be6148588d78ba06283f92368f65a8f0a97fb3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar-yellow-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f4bf0a87df8bc1c2ea1c9ba4bf8ffa48b0a9908d08a6f4dc5421cdd3cf6e10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in productive-amaranth-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81040136bb5cae134172199574f73da76125aacbfbb6d7921c61c95e17079418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful-ivory-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bed77576b80ec02895d81665bd14663ee74036b695975c846f4b62b364b243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous-silver-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8682371d569dacff7bcc4cb410c91cfaf96b514cab2d697400988365f3b52097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-azure-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c290b87dfb73b83ea1ffc99643264444000a5ccf05f47d5a02caca993104e0fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless-pink-wildebeest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6e2aee9899132b27d27698ef3e35f02e2c004b0de82a08bf603337f53a8301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early-orange-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786a66000246e9f58983e11ce65f3321990748f793638c79a64eeb2e88d71bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c2f75a762e444732be5572f2bee39c7031cb938e8169b6d4ef94f7a11b4618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...