MAL-2025-73429 Malicious code in ida-getuk36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b1458c94004e1b14db8f35a96cdb36463ea60b2935db42f2d5f6f66c34f5626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-jengkol46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c1a61f2741487d5706685dcaf1fc3b4338a7aadd298731c3b61b956b584b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-sasag37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e805dd5022598697a5262f5143d38260aa92e0b98b4df0ce7340daea2e59267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71807 Malicious code in ade-brongkos5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9439eb63ffc7dccfaa85a744f74dee3caf2e4f4c9787237b77aaab024ea9f202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny-scarlet-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fbcb4e4b148e1fcad03e97ff8122ebd2c294a0d89e7c01cd1707ba0c3eed35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial-lavender-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035391b18ecb6b6da7a0cb471917359ee2c437aa3fdea6311e561e2665844e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67230 Malicious code in close-apricot-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6d421b61fdfc98723e93dd39ac5fdf28fc283cd4492a447460082570174ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71781 Malicious code in zesty-silver-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe030c3f7df49f8eaffae28ebe9816e3a9a9a769b5c1205af0642d04cd15c3ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71734 Malicious code in yodelling-plum-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c03d678403fd871a5ac204f1d2fcd78275fbded92d3aceea99abe3cb950024e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bncn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66549d5529e5b4040e552bca2f3e6eb58e2cad80b131672c8d1c994234735380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67727 Malicious code in depressed-magenta-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45feaee03f52f5a82e4ab899d3baa6082ec93744130c6c0cd4ad4a0f8993031e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69095 Malicious code in legal-orange-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64efc2a57239437175e371224ea49f0db255f8c3ac9d3df3308f6c5523dca27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy-purple-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddad31e43e3421d51fe647897902d78cdebb744104f2cc4f9b48628c9b52a006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67198 Malicious code in circular-yellow-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd48e4515f4491e495e1f80799832ef20aeb3b01c3e2bbbd614bbecf6c6e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d05a56ceb98e1ad10f448c57d022873d1ca3eecd4a059f6843fc8fcb77229ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62806 Malicious code in erwin-lontong16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8049ced151d5b83a724ea12ec32ac540c0f0c74b29a863fb29d33104abb4fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-kembang80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c6c509a03b25c03d42f20813ef37b5f51d35e834d6f4f9e53f17179b83d82b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-miebogor33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588ebfc66a3f9b02fbc2efa635a590d18aa36ac9a3c97e6628628ff8eb4f7761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-taiwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c49a7275f02f11b2182fca6a961f4ae9a8bcf0fbfa2aa404cc0caca8bccc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ad5c0e392a44174042217187b808342320694f72b1ab40618862fbaf5ba21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...