MAL-2025-75130 Malicious code in riana-dradag43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db52fc0ab919db438a0c6a303e805706b186bf154fad6cc808bc2cd007c00cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75770 Malicious code in tuti-kue7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394f074cf112ef7db3c098070f6f74f2b7312c7bfe39a7a38aabb31328bac2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72630 Malicious code in dono-tempe30-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30374728980fe6f8345e3d35e42da14e58892cee3d37934889e116541af64707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72651 Malicious code in eka-kentang70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e9a5d90743630519371535240bc0695d6da4b7e80edbe0f6547b2d26c878b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75388 Malicious code in sari-lodeh66-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f2806fcb70ebfa264330a23851ab6e4456e4c7e677a449af96647573003fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75769 Malicious code in tuti-kue65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b25f5d30fac2aec2d0dd3381443e4ecec67eb8c1aa8aa444b39953020eef0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established-blue-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2def0bfc319788ba1faa3d5055590464c557a21c4c4a2b66b147973ea7052f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact-maroon-rook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052f5d927b280655b9d75714a98a40f18d53f32edd7719807ece9baba53ee3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-turquoise-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea514f59bf6ddb07caf7272f6c09a7a69bec593f364ff03e8ab690405262999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-indigo-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd60a29f0c73ca947c9e2fcd56e1a782cc986289c66f2fba5ee00a941ab4a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/ciphersage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2a5b3466a9a0966cbec8fea3a3c30a21f29edeb9b0c51f8e727affe28a1106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68010 Malicious code in embarrassed-scarlet-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a606a6fb02abe788e76490871ad66c6291b14b64a8bac28190b546725fa9f4b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent-yellow-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec6a8edc225597c51f05633ae3f20a7723c3c37df4914c7ef072a3fd46c413c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud-gold-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3c6d182e73dacc636e228f65f83be9a23449c82d0cd8376a727013598ce9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-blush-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f96f6408249c74bd44d42a657cf719eaebf4400056e9b75f580611b3a8838c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70581 Malicious code in sharp-peach-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed8f7bdd28dac7d699d6fd09dd2351d371ce322df0ac941b1941b7588ae0889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...