MAL-2025-130435 Malicious code in suspicious_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d254dc330a33680e5ce7ec0d1afa8addc699b123438c4399a265c95e78df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129219 Malicious code in oktafian-kue99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec46295b673cd432a9009349ecab86add55e49b0383a01f034422b40edf3ad29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127406 Malicious code in independent_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dff0988acdf36a0f941b4816d1e34d635cb6a13b22c5ed54e1f9f71d92b1850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124902 Malicious code in agus-saguer57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae79d90ec477e6915c006effcdef1f62035a409628da7df86bef73bf9652d169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129848 Malicious code in rifqi-moci84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c15a93aa0702a8a1fa555932bb4b9b6a7bef0115ff4bf0e75074751f9df466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128539 Malicious code in maman-sasag77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74839cc313edffc8fc10baf5154666a1dbf7e002ceab732bf42fbfaf223e9981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129279 Malicious code in organisational_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c80beebb50bad18a30606e7e7559ff4ba2df416a48552bbb058a456d5e45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128494 Malicious code in maman-gorengan50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68307a69468bc1a8f6b3137e8ce834390518e57112e7d7feabeb34925b65c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-wajit85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c32214699f7561000ed0d49e27f89a2d9c87d6121e1787b1407a21ec29cadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-nasi72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26b862fd0ad1290ede518e5ec813b3670c6c6f7bb3b2d8ad58ee91a48aa6830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-botok14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9274173c4d0a7c427bcf7a4da6a74624bae3615a17b7f03741b018ecb4868ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-93605

Malicious code in zaki-wajit69-breki npm...

Malicious code in bambang-saguer70-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c1e7f74fee706199c6c67f7afe9c786cd1cb65dd344b778051a796657a1265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9c46609c2a0dcdf195d4d210df01bdc1592c088917729d98228bfbbee03861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f2f847bffc9738411d7723dac0135e79230adc42b1546e1c95b28ddb5c7276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-semur97-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de8f3268dc806f3ee4ba6b98e6b80f39e069bf74ee9abf89924fa98b095eedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-sate89-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b314505c489be8eeac53331b3fc994791c7348ec4a4e1e9e056841b1d29b6280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122021 Malicious code in nana-lontong61-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04664d743975baf9d9a06411eb23835b55cfa9adac9ee9f0ad9fdbdb905d8cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120961 Malicious code in iwan-tempe40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adeeaaab581732958d7eede24ab1d23d56b5b83760f1294daea9d741032ac3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124277 Malicious code in weird_possum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76636c7190805c9320b5f8576aa13366ba94d50012bf44a4e1cd78478e03de10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...