MAL-2025-73452 Malicious code in ida-saguer6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ec287b38558776946c3f7e76bf5bbfa02cbe1d659e487c7935d3fb4ec6c0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75221 Malicious code in rifqi-ongol-ongol72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1661807cab79a5ffd0296da9da9ab534d22c5fd6b97c6c9689fbb454ec7d4d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74088 Malicious code in laila-rojak27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b064ec19f8b0d8835bd241ebfbf87288cb7e87afb5a9dcb1d082fdaec81ccd11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72291 Malicious code in cici-kacang49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be428de1443d4801226facb6cbe480d4ab705d7d3e3372e6eb01a7e93d0299fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76089 Malicious code in vina-rujak7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf480966a00c8574724a927b025589cba3b305a09cbdfde6c3c554879fde61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75902 Malicious code in utomo-jamblang52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f441d04b195a49c29d69a8c2a53ee5643d35c1fbad3a77ae68a20f6acba55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-amber-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ed40c8b04b17f6b698b73a7a6e924a23f38077d476bf143386473f17601e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like-maroon-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056e9b7580d1dc2eb985083d790e4ac0e9189994e958b13de6a22dfcf682ed84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth-turquoise-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea514f59bf6ddb07caf7272f6c09a7a69bec593f364ff03e8ab690405262999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-purple-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0539556fba004bb6d1238bc9c24e29e267b6336e60bf9fc822f956285ddf4284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d342ed90ef9ec6b3167c1f6c6cc32a1afcb6922b8023cceadb2c8ed64c05c7f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established-blue-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2def0bfc319788ba1faa3d5055590464c557a21c4c4a2b66b147973ea7052f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level-bronze-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce68dcd9615c7d9e73612e6be4d4d5ab33fcf2f950628c1a85ea6339ab123f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in functional-turquoise-crane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b541afebd01471651746bb5347128897b6e119e38f481ac4c3d48b5238526f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural-aqua-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e3455e90561789bc8d23615f22873b47118e0fd7fdb19f829f84c7fa7112d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real-turquoise-moth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5087c54eff73cef18feb688a972be1cf0e30ada99364ead654f1645c8a695aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-blush-bat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e20dc8c56af8006c1cc75a3fd965876d1752f7d3be749e0e4466cba91213af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-lavender-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc20b9420ae376b5bfb11c32255e26053c2d4023533968246ebf06b80a38c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-aquamarine-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73074c3a1dacb6193609183418ac0620079903ca8e21ec458ebc1b5e325d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...