MAL-2025-124150 Malicious code in wasteful_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a587243031c63af392e1c9ad4660575e5fd3161eeb99d83beaec1765007ddcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119186 Malicious code in citra-gaplek78-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97de0838c5e5af7cbb4c844e8f89e885904f9d31551006525886c5f034dc81e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123862 Malicious code in uniform_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fad9bf586e320e69cc98f2999458bfc07aa09ccb3b20b6f76a6683df1a4d71a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118904 Malicious code in bella-empal68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f7c49be537a51eeea399b6fcf211f4205f225a3c53360bd9d20628685eaabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124585 Malicious code in yuni-rojak29-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0c46a82720e384e6be803398150f2e67545833d5fa7e7ff1e6102e3442c7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122217 Malicious code in ocha-mie35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5191d80827f4c6ef6b602c6c302bf507b8558bc1f500cfdb4d90057551e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120768 Malicious code in indah-papeda37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e121cb06cf4165c036b6d6bf9e28b012aaed0e18cdd2af7ed4bdcef9da31706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120364 Malicious code in gita-ubi32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c488c22c155dd4afd773d1fd4c7587ec77b32a8268a1c2a54b646bb53f1c4130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118766 Malicious code in arif-ketoprak61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba059304716f38d4c4223050f12c2a07f86aefc12f0d4821e2bf5a54d62b94d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124174 Malicious code in wati-ketan94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5197b4d1059fed180dbe0de10cbcaa6f3d9845733750324f6eac30a1dd812c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118791 Malicious code in armed_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0565ab9bf3565519a39588ad88308f2535bb226c73cbb7c06c78f808f11c23b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118803 Malicious code in associated_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311206d312a81a5147ae7146cd1fdca221f846ba06ef5e0967b4007577dcbf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lontong82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60426f92d70bb6cb05c1432d4a5410bb33b0d1828e2609e51b164ad2b66ca135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e94dda37730b59d7da3878dc73c0bba81467ab60c9f9a4770029afb7108657b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-104567

Malicious code in indah-kacang24-breki npm...

Malicious code in zain-asinan19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de294d394c447c90ae88df9ef50429bb030bcd10fbf3623b1d14bf60c64f02a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-naget11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a2ab2ac9d23723bef4511427f09f3072991510c48c07d233a04fdf0598a682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-martabak34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e8581fc1160216e899d587ec9173efde5cca1527c8e3001d3e386a7024fa0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-soto8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3213dc8204fd914a9ecaa12eeaa2592ea8982a58191b45159bfc18dd77cd0c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-taiwan87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef480d3a8e2cdeee098f0f3cc91d5f3d4b63f6edfa2c003c26a50314e36660f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...