Malicious code in hendra-botok51-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac53f4b880eb0319258b8be895c55948e318285f9b6c7c14f41ad15c1ece82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sambalado97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38ff1c57c0e65e0d0d46fadce66f702621b2d60f50af965fddbcf9d14f173735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73966 Malicious code in kurnia-nasi90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9910fe9070da89272fb46d3d1a690abe7244f1ebf3509073fe1be6f3abcc98a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73453 Malicious code in ida-sambel74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2796228bf0da912ef197e05cd01386c30a66610bce7726360e66f3d40665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72199 Malicious code in budi-nasiuduk4-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538633d6a083caf8a716cac48fbcde8301e07413266c5929aa0c630255d5f3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74026 Malicious code in kurniawan-rujaksoto17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5fb84ac6c9184fb45ef41d4848b5358230d689107e9042dc6de90eb3249cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73738 Malicious code in joko-mangut55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126fc319db4dd926ba93d8df980dedf0453127503159af27fca2090b0f445148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74643 Malicious code in nurul-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78134646b36ced18c6e02e149a19e9941b8729dd035244f5bae2e50a0b778dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74949 Malicious code in putra-ragi56-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94eb1aa1bfb87d16f68d57392105d6ded0062895ecd51a897b21746ffb8407c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72645 Malicious code in eka-gado-gado71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f187ef4b7ad9c28f0ccf5978023ce7e3325649fcf5cc8119a2f231ddf058f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice-turquoise-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3299dde70db6b11a153493c31c76bbf7c4718642fb7cd89f8aaeabe3c263dce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54108

Malicious code in gleaming-scarlet-mole npm...

Malicious code in tremendous-aquamarine-takin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c1dce1795ef6822632c8b1a6f52480502a6ae21f336db4a5ff6b1c52cde3eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55007

Malicious code in dear-purple-bobcat npm...

EUVD-2025-51457

Malicious code in tropical-amaranth-cheetah npm...

Malicious code in due-violet-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036b7c4a7100f5255f3c56ce93ee564b5d619e50020bbffa83e4b7ddca1f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70864 Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70695 Malicious code in smiling-indigo-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd7920d5200b98c612dac692c4eb88d519884bc64fb436366fa029af0e34be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68582 Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71276 Malicious code in unfair-orange-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946c9f03cf05416d7b26062ff3cf16766e095fcebf7ac9d4a2649e74ea52441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...