MAL-2025-74716 Malicious code in ocha-sroto5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60634e8c52dc7e630a809893daf1fbc7c5a252f89b80fab1941189445473c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rojak60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2811d4bd61610c65d57938c4a009021442948fa6004417c12888fdc3ebf1043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-mendut72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723827e2341bd3a5cf8879bca4ec9c64ef9734dc37034560ce7bc91a9148add1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-serabi93-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d821a2037aca157444ff8848c0843dd3f2f5b43814e3d565c6720c716843503e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gudeg76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47adbf7310449efd4ad27c9c679a0b230a2e7e37afdfb482cb4331a0b8579578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-plum-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b370361900bec6471ac8687765bfce6835d88060599ab751a9bdc5d22eb6756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70152 Malicious code in racial-amaranth-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f200330347de6690edb8cda654e69b76db589ac0420ba01df4017a4b92808ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67482 Malicious code in cooing-gray-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881ca8c454ef1a6736eb745998a4e14080b2aa14beab979af3880d6407d3559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68410 Malicious code in frail-black-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 111204f7e92b73141c020c30724d2433b1cdb8b8efaa69b06100169c722f6800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69734 Malicious code in optimistic-cyan-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337c04fca762a8467ad90d660a8de36858da1694d0e2f4c3ab139d99891f25b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70899 Malicious code in stuck-maroon-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286aed10b8819d87d820dfe98dd160430ff3e5972ee578ceea5aea2fc8332001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-gold-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c515eddc135532b4f81f7a09a9000a71c33defed78c1fda423db1afa566b291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-coffee-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdb471f1a3e5cff8348003194c3ea4d7198c60743bf96b93151fdf5f8db0a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative-gray-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06aa9aba89ba62134e7339bbab7ca0b3f89781cc44406ff2e1694b36b5b2aa7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic-coffee-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019c11bef911bfbcb2ba9c4528051821341a05afed569cb701fc779077b54240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-copper-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1354ad7deb27115bf8a28b709b1627ce48fd9b58db160f5f97552d7993d1ca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-copper-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bd70b4884576b3e287097be1c952d84606ab3b0caaf866197b4385ba9eba47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...