MAL-2025-75404 Malicious code in sari-otak-otak97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5673b29c28d1298f1d7ffca1a4da3a4fe74d00e24f164600f05d07a191640a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-jade-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be09c1d0ad2de462cc1c107adb0b674784e778a142f3eb0f752a03bb7af49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-blue-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3150b17eeb9981cc637f4c3b436830d564ba4f2d1e9321e05a290daab7fefaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive-harlequin-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f416705276e35227a7d9261c4d6597c3de24f921fb490a0c9db23ca31959cd50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak-coffee-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e6535ff3f318d834e1c0b79a60a5f6768805da1596ac9b4aec3d2bd504c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-beige-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61bd29ab80198d2ba1cb3e5f8010f90b6a7fc90d3cbe3203a16d94c28cc5dc32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-teal-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf27855b8d982d64570e54c2f90e76e0cb63f93110fdd99c4449dc1754f4488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual-sapphire-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9d71f93226fd1a3713fb3e6bffb5172c666cd3eaf208db62430103d382e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth-beige-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0169fe4d449096f70bd8ae55dc1621873bbae21d5d502e9fd8c384d5284373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ee152906583f5c46877e21118ab2a3a0dbe1bcaf7166ffde17eafe64ccbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim-tomato-moose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbad8a54e8e2c7291fd59b975fba5b4fe06f00acb3276aa0cd96d3672fea42f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primary-tomato-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ad301515d71c97966044c99ea1916b676da61613831075606b740c593ea50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan-harlequin-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af373b23ec3bc54737c73997ed4e178caa3f7d348adefc2e066539730ea67f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet-maroon-narwhal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de3bd0edb2552011ac222175d729fb3e362b9a78009e25d45787e4950496c7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside-blush-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb585e2534df279668c244fa648dab02c569261c227ae04ac2de1c83c302b6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-coral-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496bb02add0626a7c3458382465d1fc020153c76cf6031727f08c86c9b0abfcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-blush-slug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb854086fbe4c5c275ea1a6c924e4d77d04d2d461b9e2b7a92624e10644dd9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged-brown-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbbac7f7795efef2ab473c85bdcad7a99b03433f965c6f75e8a9c1baefad7bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective-jade-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935388bf76407cf0d80ef3d871f449c4874b63ffb4434da3ae03a9231cd20d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cd3636fb3bbfbea120b4b96e14251b65d7f6d8ff91ec0fc0e3215fe4291154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...