MAL-2025-124471 Malicious code in yanti-mangut69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d547514b26664bba84b9a212b9dbb55d0750e21422560a2814cce87dc587265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-kue95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0dacfc5643bb7f9770e2a6862e7df3b1f1857bd3e5024fa9ccefcb75fb97f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-nasi18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9208f166eab684b31509dbe13a68830a6fac2a21fa683f68a7473008748e0af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a33f56d072b5f13f949ea6f9ede486ca28698f58617441407911302b10dd79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416bb3ce156b650bb19e5185ea5d61612c341ad512e5c7796d888568e20b3dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72657d7e89e62f40029b4a87f8fca517e4a7b1ec7b884a06102297f5aabef664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122978 Malicious code in rina-bakwan35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80548c79d2016853cb7e8f085e24aa6a86805653548c89e4e5c2410490bd71b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118562 Malicious code in ade-bubur73-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4f6bdab0aa4a30f4e329afd89cfcad55335bdc2d95bc6076e69788e2dae76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122082 Malicious code in nina-dradag33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5cc88ba8578981a790677de7a7dd0b188744f0a6518fd077d410ed48d4e620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119673 Malicious code in eka-tapai78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70dfb71b67ffe168084eed42eca839effabcf66009596435d2f339195139de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119418 Malicious code in dewanto-otak-otak58-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36ecf9801226c54ebe4acd3f203b61c84fb7abdd8708e9e80acfbc6cd2f8810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119503 Malicious code in dian-keraktelor100-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924e4092a31c87e6d91a31b392b3c844ff7243f7f05e27355364ae0a468aecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122768 Malicious code in qori-lupis10-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28242b05791458ce571ef91b56542a570a62f260ac065a9ffefbd37a6a5d2f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123429 Malicious code in surviving_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1a4e7d37de5cc2d2236bae25c4b96e42b927ac607f3a1cb28130a27559ab45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138578 Malicious code in netflix-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 711ffa8c0ce9379a63de3ef137c0bf569750b0d78159c94ec77e3e25b5354050 The OpenSSF Package Analysis project identified 'netflix-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in eko-nasipecel38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a70c6706461525b12bfa3f209bef9c9bfa7affe834bbab1587fd74a0f7e9dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-empal4-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9311be441e2f8010435f2a84c723bc482f47fcdd2502dba0f313552b69cff468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-keraktelor78-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e03f010b3b19ed2da3cdf7f8e0595aeb65b172032862e420760d0b10f7f0e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9ba900e9f787fa0dc85309d53bc744bde2cc3976d9bf40761caa5cd65b2498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e5c48c48c217e6a7db20516c1574d3d7e48950d987e85e281b240d1cfaef88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...