MAL-2025-72471 Malicious code in dewi-bakwan51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16732f97d14cb1d81195f052bbf1fa4827dfce543dff39716f9608b11e344f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75221 Malicious code in rifqi-ongol-ongol72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1661807cab79a5ffd0296da9da9ab534d22c5fd6b97c6c9689fbb454ec7d4d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75770 Malicious code in tuti-kue7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394f074cf112ef7db3c098070f6f74f2b7312c7bfe39a7a38aabb31328bac2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72630 Malicious code in dono-tempe30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30374728980fe6f8345e3d35e42da14e58892cee3d37934889e116541af64707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72651 Malicious code in eka-kentang70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e9a5d90743630519371535240bc0695d6da4b7e80edbe0f6547b2d26c878b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-martabak84-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286898fd98ca9699f383c2ff01a0b1cf099d6c448ab2b4e17cefe70f7dd3eee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal-harlequin-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0eef2ecd089c27212b3f2a848c875503c8b4334726d16741cb5938e6b084e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent-yellow-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec6a8edc225597c51f05633ae3f20a7723c3c37df4914c7ef072a3fd46c413c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established-blue-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2def0bfc319788ba1faa3d5055590464c557a21c4c4a2b66b147973ea7052f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-turquoise-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea514f59bf6ddb07caf7272f6c09a7a69bec593f364ff03e8ab690405262999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-maroon-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052f5d927b280655b9d75714a98a40f18d53f32edd7719807ece9baba53ee3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-indigo-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd60a29f0c73ca947c9e2fcd56e1a782cc986289c66f2fba5ee00a941ab4a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a5b3466a9a0966cbec8fea3a3c30a21f29edeb9b0c51f8e727affe28a1106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud-gold-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3c6d182e73dacc636e228f65f83be9a23449c82d0cd8376a727013598ce9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68211 Malicious code in faint-amber-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5791182eb886438626970f7b800fd9e7455301c9b62655e8b2714d0a9f0330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69557 Malicious code in naughty-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a081f50c8f9f1529a81c2392169bbf4c9dd70dc82eebbdabeb3b11fa61371295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...