MAL-2025-73676 Malicious code in joko-asinan94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5387fb4fc006432540479016889d72c5dd60f516a6455754d3bdb45597bf5def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75857 Malicious code in umi-jamblang83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab26854e01e29632833e0034765d180384eacee900361093c10c268442d4264a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75052 Malicious code in putri-serabi67-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8995964f34ba2e3bcae548d4597dd309a9f249f82892079928a3fa2f03f05a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72010 Malicious code in arif-semur37-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f33b37152d7b5b40030afb31c1f7f52ded66891d33dc60de958eee425105cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74827 Malicious code in oktafian-kemplang18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64016f80fce781137510f9f248435459e09b03668416eae8fb585a2e870fc352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73069 Malicious code in gilang-gudeg40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f712e91c746456370457b88de7efff6df2f5b3a0cfc90e96fc2508b4d56d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74377 Malicious code in maman-toge39-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76781ef4f0792fa3a31c82fefe45bbfa933b9a58013390194631cb74dabd057c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible-moccasin-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0696bf13796765e9f11e454569a284d08905343e4d8a56a4b1cc7e6b18167bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-tomato-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb62ba2f970aadf165bac30d424411eafeebaeabd8d275e831102326af24c1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged-aqua-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd480ea24df9b0bbf1c329bac6ee999198d1a94ed65c126f94d44ad21b2b5af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward-cyan-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fa5e634c5aacf6f1134c46a683e2ccccf52590fd46fb051c4217cd832e790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-yellow-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18275bd2ed5cd76fc54794fdadf90955b4631a1a45e44d072690fe01818a82e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative-blue-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2159e27af3e49e0a543606bc3bc0c88b549fbae9734d73af7a2de53cf1a8e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbed-peach-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0958b8cf72ff3539134d5d039e7992ecefe7a39aff5d573f330214138fac8670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual-sapphire-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145890cee1c2fa10a6220a4248f04920d81665c41131c90393d46ddf81adec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due-orange-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8faa3d8c4f487342b99ebdf415b951db570cf4f0cda9414e76ff054a23cdf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed-peach-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-coral-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d82a1955feb859137b60d22412fcbd2f48d94dcd591533246ff390effae03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual-ivory-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e5613952cf3ebf04aea32d08bf97ffe7288d665227f2b4b72698f5bb3cfa852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday-scarlet-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90e68e0abfa126ed9a00df5d880d8aa8c343dcd8561311ac2a621845546131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...