MAL-2025-74543 Malicious code in nadia-ubi43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdaddc5a0cdac12429529e06d8c7fd1318ca4050514e6a32ca790554c627110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75671 Malicious code in tiara-sasag72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40432afe9609cd09eb0012874ca82eccf49a0021821a15a73ea2dca37c483b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76352 Malicious code in yanti-esdoger24-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3380e7c6e62619cce0bf3989f9c95364e527b3a91b860387879b0425bb4bd693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74798 Malicious code in okta-otak-otak53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13859ca37d7bc057122ad40a01fc719cd38e553a0ea5968a304db09b80de4fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75808 Malicious code in udin-gorengan81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6fdbe075fa9ae997540b7adb245f48580ae7473da53206a8f518ef8c0990cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73531 Malicious code in irma-mangga81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d70d7d4318711267b7ae04503bb3cd91530219a02b5784b19c8528458aa48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72569 Malicious code in dian-soto41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce542fb6bee2e897700295d2a88d50cbc2892f738f516e9884bb41c04a63715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76454 Malicious code in yuni-klentik29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4bbb16eaebc1e051012e4e1967f0a2fd9f25365379b64cd5412532c8f9c1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72159 Malicious code in bella-tapai93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1700cd93cba89a5ff670d70550f9d9dd3ac0bf00d230b7535b2ce9b917f856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview no-barrel-files is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in regulatory-fuchsia-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2042aa54307128c903d87d2f038cab374b5df3bf6fda5c1e69c22106c4faa8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-olive-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c06bc7911de1e2801a285a09abbedaafdac2a75ed3db8d052a8d03c4b925d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily-plum-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5be62b927e61034377c98b8d0fea17fe89133d437610d0e41e4dbc53b9d2c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent-turquoise-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7483b105c149291f7f93101f46e20ccf55a0194cac86d9720c6cbe75859a824f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-indigo-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71206782601a33b90e4ff23a1577e66a3d7453b45ee3d7149099006c91f7535a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval-amaranth-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90229ce65a8b5e22ea1dacdcbebfa2821a1c4b2529a7a4e267b459b2eef4803d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber-ivory-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b502cce52e2a9b8559899bfe3e926ec88418564104d884ebc45fc7f53a07da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy-aquamarine-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445d8c93165d66f6ddf3c5637fbf91f480a415b6d02da7fc192ef6497bfa2e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-black-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f23a2bbed85773c9588699beee1b478fdb8da9b707da521c4d3fdbaa2f83f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuclear-apricot-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479ed9419848bb921ec467af85a1a6e230a71e6f622516a817302db0691180ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...