MAL-2025-73323 Malicious code in hanafi-gulai63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c80a7876e73b17477e49c1c37ca2ef51adc29c1dd1ff589336ffc3a3289fa94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72469 Malicious code in dewanto-tongseng49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999ddf56cfc38c4b770eb3db23a04a28756395172c82b2163a54c06f087e272e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73356 Malicious code in hanafi-ubi40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b9f74f98ec6a86a13076d21593696703cf68bb1382153314dfa539291a68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72993 Malicious code in fitri-oncom39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c744e68f4707ec669a7d5ea76a5193230defb2ddb01f26835d3eac231b15f7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72046 Malicious code in bambang-kupang72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50bfb080ee2345fde0605f68cc3d0f059b965b4a2539cb059b7a996dedc620ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76459 Malicious code in yuni-lapis27-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09f056096102ff5ba5eac4bea06c778f666fc4681181979825915378355dd69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent-rose-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870f5fc909ca537cd8ef1eb8e6ce7b00d64c88a10f8ac1f708785ec84bf6f465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-white-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 754d317760eb54bbdc048bb90476a7077188e5a263c14dc577b74fad76fcb151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big-lime-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6478b513192b4378199d37eb9c89f7aa78ba9a0888874402b0e0805b4064c753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-copper-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 632f867a7ac504ac32684c53046fd6d1a8e77928d78692a7855aa99fb556696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-bronze-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfff5de166c46af273b9ec374629262e06ec042abd0eefd9f0a52f49844866d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial-blush-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74268585cafe04b13ac1648b205bd954184697ca6b99ce1c0cb8268cca0e33af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude-purple-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60a0bc8b1712f30522db9349157ff1b7938d01ff3d45324659106d41be5a311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfc6d3fae1d552b24e07e390f7ab003ab17e0faa6b357447f03bbcf0ad23c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant-emerald-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2021771ea913fb731998e2aeefc897e72737f6537e9dd0179c38b252621284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-tan-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e26056ea9cca3232862634784088f1867cdb87aef6ab6dfff0d4e4cba58427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-plum-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0592427a2f24c5dbc1b5da9eea18d530683677c3603140740a220a9540cecb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist-violet-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ab7550b3ebcec6ef24c4b6b0da2fd00559160dc78ef59522a6fc184cd9565d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm-aquamarine-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2964a911f98e9c7f22ba2da48f472a5ba05ee6f2537700e9eb10fa35d407eb8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full-jade-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06931771fc044b6e9bf84772b911d2ea8654c448b71d8403531f4ae9d26404a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...