MAL-2025-75839 Malicious code in udin-sego89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06577376af812380468d0cbf60529daefff030a87a95d54969ff62477532b7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-gado-gado66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb63cfd13f279ca35f0354fc1f76ae691843c9019a557b6b05fb8b9337ed708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73814 Malicious code in joni-mangut6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d24b452d63da3992ec07537885931e3fb34dc743f35587f670c9b8d0a05c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35032f1e740f359b451e6e7d4618a5eb198315fdf6b38e5e3f30a003334306bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist-tan-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb1d5924368d47e514111ffca41acb70f691ee24e2368fc201b356a3e054f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69854 Malicious code in peaceful-jade-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1feaddea1bc30b653668b480992ba4e97d413df94af05a3f700fb445c46c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d788a480e941f1b36b843708ab8ec0619ef2693bc8cc761317503301969f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66982 Malicious code in blackrockinc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5969bd6a17947291ef89a679e4113803c6a6e54989806d2c216557ea76f4efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66614 Malicious code in accessible-emerald-aphid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce37d8675616734cbfdc7d3548dfb315c9ca92997068eb0dba80f04c32f612d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69622 Malicious code in noble-ivory-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e711d7addbb76dc9a7f318f3782a834ac9e31dc239979ac927353d5e9dbc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern-blush-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3d903362f48067e13ba84f3b64933d6f2d202bbb93129a519742da5da97ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-bakso19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba8f34d438a7e85db8034f1afca5b898146444e696ff6e44cb37e1ded35360e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-bubursumsum81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e1ff4b2063b71554c24a5c67db931243fc3c2e074668ea15e96e28f92846b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63531 Malicious code in irma-gulai73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe6772f736b0b03e2057e52413405f4a777b1b904c03d9e3102e9992e25bf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62747 Malicious code in enthusiastic_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0284c018370821a5f96fcc435c714e30f7c2c8b7a145c2d699cdfc7e3bf2436a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b4725c1bdda0132f176de41d9b700b8e86866009dab65f3ae9fcdfd10a8a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-keripik29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975287222e593d5747620af5fe0cd05fd9e18f77c0d6453e7e53f9d8afada42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-64144 Malicious code in lutfi-nasi34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cab5176abe28c39559041d4841c00ac4b959475f0dd50f0c4164f998d4075e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-donat66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddffc9f56119dd1f58fa2f9473a4e1d0bc4548a473f1dc7bb47ea9783faa74b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-kue4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39f8c192e5719a64bcb6fd72452e08f204882215da32d066676b1c3d2f54e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...