MAL-2025-71929 Malicious code in andi-kentang77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608149fd45eade97a0bf0e52a720c7c6da5d3a35d6d74b83de9707a294957ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-bakwan5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de67e183eab54be421a56d3347dbc4d31e745e28730b5766d23773845c482627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75689 Malicious code in tomi-enting47-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b76edc3a06da807379ce3f2ec44917fbb32c9788a6ac726e7fc38550675dc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74945 Malicious code in putra-nasisayur77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8a692afae0a74b90ec56b7fc6cc347de29f25cfdd48cfaf037e5587a73f526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary-amaranth-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d880bf554e46eb834832893483fe2b31d17d70f07c9ecb92fdb43d4e2a081c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional-beige-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269d347d59db0e0e9cc28cb51693903707c95e3f7d056d421282c05f820c8df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy-aquamarine-anteater (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f278cf692a01382215ed581f064b588439a2733e52856f09bdf74738604f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-emerald-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0a510856680ad4840f3d23b0dfcc1720919be5bbb1043cd0297b85954fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supporting-moccasin-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2838be45bf20798d1a6f0a2c74dc95211d6282c16bede0960d4feb9d65deab33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan-harlequin-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af373b23ec3bc54737c73997ed4e178caa3f7d348adefc2e066539730ea67f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-olive-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c643bbeaa8c186809c19398f19813195f06ffe07452a8236703fdf88812c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful-salmon-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ac381a9c571e716df9cfe9a7ee24339c25657feb7d8a03dd2de8910563a280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capitalist-scarlet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6d0d57300ef72003c318f75d9e83d3482318e2be9c902f77424f24b90f0263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban-pink-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b8e122aa57577d4920fab918b68243b1f825e109db62b540cb2b9f1f82960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned-scarlet-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c8e41367691b56d04f64fd693b90ef3839f60653516f5cae1fc0a1af3a564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68262 Malicious code in fast-orange-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d229bd5cfbef33df46f7469bab7e870e3a16c8dcbf3bdcd686a95633bdfbcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68650 Malicious code in healthy-copper-sheep (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a27bda73ac41d9a5a074a7eaecda04fa99e348444c37daf1862818d1fe4364f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67263 Malicious code in cold-aquamarine-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595653987fa31a45a30f71e6e139ede2fca9020e7ac69f179384ff61a7cdb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68277 Malicious code in fatal-violet-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3677b124232bf15dbc7a95bc282b3ac80574b61621475bc0e76001d64550bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70155 Malicious code in racial-coffee-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f16a5a558195b05516f19e16a517bc71971b33d5c5aecb0cf7d1041911e9f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...