MAL-2025-72645 Malicious code in eka-gado-gado71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f187ef4b7ad9c28f0ccf5978023ce7e3325649fcf5cc8119a2f231ddf058f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73738 Malicious code in joko-mangut55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126fc319db4dd926ba93d8df980dedf0453127503159af27fca2090b0f445148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72199 Malicious code in budi-nasiuduk4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538633d6a083caf8a716cac48fbcde8301e07413266c5929aa0c630255d5f3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74643 Malicious code in nurul-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78134646b36ced18c6e02e149a19e9941b8729dd035244f5bae2e50a0b778dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73453 Malicious code in ida-sambel74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2796228bf0da912ef197e05cd01386c30a66610bce7726360e66f3d40665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74026 Malicious code in kurniawan-rujaksoto17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fb84ac6c9184fb45ef41d4848b5358230d689107e9042dc6de90eb3249cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-violet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036b7c4a7100f5255f3c56ce93ee564b5d619e50020bbffa83e4b7ddca1f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised-emerald-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469b356b3cd49dce05cf21520d33a3f64dff14418a775ed797d6e44d7aaaf747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68582 Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-turquoise-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299dde70db6b11a153493c31c76bbf7c4718642fb7cd89f8aaeabe3c263dce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69710 Malicious code in old-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96238dc96f227e1e070f9a42d86ff2abba25b4e9ca0b80e7eb4639f7f8d52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70695 Malicious code in smiling-indigo-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd7920d5200b98c612dac692c4eb88d519884bc64fb436366fa029af0e34be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66838 Malicious code in arrogant-blush-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6820ff06f89187a7e4e95990a18499f94883e3124de48349e861bce3323db21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71561 Malicious code in whispering-aqua-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19aaf887e211e6bab96c21bfb9dd9bd5e7e54fbb1b443d3cbf5583ee2da9307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70864 Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-apricot-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7801d01cc977fdd15b061296513231aeb1f49980d83723abb61f981c487f04df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong-yellow-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f82edad58dc5ec590499f6e6f99a2c635b05861a0b154ea4beaf5f923fdb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jayo555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b4d31f2440a85660a47ae8569b7f3f2c6e74c717c84b12b1996be7223b2137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...