MAL-2025-74904 Malicious code in patria-pisang76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dbbe7921909c12c8eeddf20ce40841591b371fe04cf7f211502251997c10fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76326 Malicious code in xaver-serabi18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df0aad1ce83a72a5c2b7098cce2384de23fc97eadd405149f93849765c1aeda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate-aqua-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1b7dac0949d437dcfe21ba18295b461e2565b2120518c51dc0b3b6767196e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool-red-zebra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8184753473f86bfa6ce618d53ceefb38492f33d09c31543b608198058d9c91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-azure-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bfc30d5a463b7cccc464c99cf73c70eaaaa12c2e9f8a1e40441c81a80c8e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-indigo-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e42f7bb2da584bb623dcfe3deb3d494474369a7511cc67c356e3647c5c6c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-rangginang54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f5b194993eae1b62089fe0f9f8983376d88ee3bb46d2a21e1c12a1e6ce31db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-sego82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f078b44553e1977ae4eb7d4fcd66a730469d46246843ad69a3afbc53610edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0be82e339884d218c57d8edb77bc0d03618d84848837a041866fe45cfd908fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-sate76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddecba660f5097aeb87df027d2f24edcbdb35d33625150d641e5125bcb2f9b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2beb0e99ac57a2f3f1a2ad789194abd7c8dd8ea424dfeef257c391945eff26a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62829 Malicious code in erwin-soto72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657c2a0df441ed30828bb579b7c94819b13b10a960f13a75aa572b780f26b317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63476 Malicious code in indah-klanting97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0526d34d3bef4d31a476ece16ae53d45bc3a03a6c8faf009dbcb3f53d418ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-tapai63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4be20d4499b98e6d79158608d4b080ad717bc932e79cf14f454e6ab54f9b754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84956a4c43cd2918baa4d0666d9075d8eb8dc52dc67e7e90c5572d87360c03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adc73a2b067dce0c7ef34b7d16f7b8eaef2eaa773d3aeab90e83673672f2488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f081ddc2652248216769a80be5bd83ae745550db3365fae0e56d1ad87eb7de70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60448 Malicious code in famous_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7172fc9913c7f7dda338a859b27a1e2b60b5a1ffa47a7017f266ac19070d3b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c760f4ea94aaf2d7bcddf456c4414bb0ad457080c8db8c0686a97b6298f6f79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...