MAL-2025-129145 Malicious code in okta-gado-gado9-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4c845418d6cb50407addf8b463bbd6eab8b7a1609dd61c1e948f236970b35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125802 Malicious code in dewi-rawon15-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b033a1ab1cf6830dbef484529ac5a4941c75cf7cf4eb4d6217c2392834679dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126816 Malicious code in gita-gandul86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2950a622acefa11f563b79e7b370d5618caac7dadc06e264672e3856c74db04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129192 Malicious code in okta-sambalado1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a84d6b7559854cd65967ee9f689999a6c4dd076047564319d2d0dc52d062ffe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-naget11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a2ab2ac9d23723bef4511427f09f3072991510c48c07d233a04fdf0598a682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3213dc8204fd914a9ecaa12eeaa2592ea8982a58191b45159bfc18dd77cd0c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfb9cf271918b651906aeaab0ca584a0385d501f83da1b02093066f52ef25bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-kemplang65-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d0ad850da89171e7c2f49f538556b6cc6dd0982c1f81d84875aeb769ef5b95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-94767

Malicious code in tania-telurtahu80-breki npm...

Malicious code in kurnia-lumpur52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b2eabffa373edad5e66e9c4fb7cb6b579d718830cc268d45a2c8f5ec44fc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-taiwan87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef480d3a8e2cdeee098f0f3cc91d5f3d4b63f6edfa2c003c26a50314e36660f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e94dda37730b59d7da3878dc73c0bba81467ab60c9f9a4770029afb7108657b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123192 Malicious code in sheer_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35352f33d41be689b42b7adf489df7e28ec5f5ac6c9e70a0dd798099a1653276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121934 Malicious code in nadia-dradag15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2538859d2c47e4370dbb8622741bcc45a17eefb95279762b758de3000925ebe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119335 Malicious code in curious_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b935df7bdcf23a1613ac6f65c8cfcfe3dbf17ddd760d8b26938805b4c9445e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122217 Malicious code in ocha-mie35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5191d80827f4c6ef6b602c6c302bf507b8558bc1f500cfdb4d90057551e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123930 Malicious code in utomo-peyek92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1053e638fd25a2f422d309c5187543a023793fb2793a8c6f2337ca443b538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121054 Malicious code in joko-gulai41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d930e675acaefebac9dc3a4af580022538cf43dfb14f751c343170a407bf69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120768 Malicious code in indah-papeda37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e121cb06cf4165c036b6d6bf9e28b012aaed0e18cdd2af7ed4bdcef9da31706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119186 Malicious code in citra-gaplek78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de0838c5e5af7cbb4c844e8f89e885904f9d31551006525886c5f034dc81e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...