MAL-2025-74698 Malicious code in ocha-martabak30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b74dd5b1a92fb96b0ead30cd4306d1913efe1bd95d046bd629dcf88a6c21f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tiwul75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b797753fbd1ee44f2597e78237491f3c3c9e00c32a9160914f67e49878b8988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klentik23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724c5004a9c35ae13014b55276c346d40444227c9f3bb415235209fd6ab1c86e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-toge2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0f1b776de4da1875f5b1fabacd78a1b4ef73262cac2560e233c96392723a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74881 Malicious code in patria-ikan62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d516a88d2d3561b38e64a52e2d952c495801a389a49fceda57a27dce519bad27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-keripik61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ce443c4f46e8f9b6b97412dba69b029636c50d8dce7aadddf1fb98b7d0c325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-jus53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfea7ce770b3d5899936be09a66b207d8844e291686ab98a3f8ca8b2d90a8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-martabak14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdb6f4a5485405aaac95072dfd7431f6b87ebc186cc526abdde8a8567787bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-botok4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eff6bd8dc437843ab76057a3e023c07481edda7b34ba18195c1c7c7dc3994bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73314 Malicious code in hadianto-telur4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe743e1402048125534759af3c23cbaa2e2e5774bb5be6fee9de9e7f1cb75e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75962 Malicious code in vera-keripik11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da73058ab7ac39e959b205f0abda24763ce520ade7df257f2077728cf394cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising-orange-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc84769220d1ae0d2715861f7e7261482ca2e088c1949697891fdc3cf4518620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68345 Malicious code in fit-olive-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d49f5f4d4558f3788ce82a2e896cd1e2e84abf89af33792e5faff81af79c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide-blush-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45021a943d2b49b5c072debb6291388386dbb69cf56d2fa1f6bb682d2ea69314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69307 Malicious code in marked-jade-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b4c6830bb6d8c8c082b2ff1e3b5c729d00f89148cdcc023ac7f0092dcfaa3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67609 Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67973 Malicious code in eldest-amber-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200608b18e01a83410b49df32c1bc4d510ffff46098bdb42abe9e887a4a6e118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-white-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebb25ce29636576624094c0b17335088e1caaf41355bc828d11c5055c961452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/cosmicchorus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be511f4995cc477eb4c914cfb94863f53259b7518ba63dc7450bb9c88b7ac2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-lime-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b6011a3d7d6c2368eaaa23714613788b6ffc504671f1cf3887af92b5bfbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...