MAL-2025-72531 Malicious code in dian-kue45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f52077e971e65f1bb73861dfefe986c3a54b4b4142fa1e343de670a395f4707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74761 Malicious code in ogi-serimuka44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc81f6099e96fc73b675e032a1a5c28b49794eb11fcad0cbcdf01dfe1e0248d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72478 Malicious code in dewi-kentang20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e592fceebcca34e43bb36a99a9f4267598e0ad3f1c58b0a52f56c999060cadb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-donat3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9791fa717c8bcaa59af92bf8df18954075e32fd7c08acc56d41e00a6543608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-botok2-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675283b49e31d94b14394b178330d3bbd9f0bbce0957ce4f950d7c75470ba3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-tongseng62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7f91805903e29d77c63827a11f849f26ef2a77bba2aedd552e1294af692b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75521 Malicious code in surya-kepok60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba3d65962adba4e593c3d15acf168c66a8ce3518367f56d28329baee0b2222d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal-turquoise-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675cc0636c9f962fcd1c80a388314fc037e2b04f5defcadc89287df14d192d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous-copper-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba9b9a1626d4462eaad37a430eee32e1a57debb477041ff2a38dcf87ad27945b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean-indigo-ocelot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb84664495c91023ad22cea576ed9438a8120d83b8a0c9420b6d66a6f6d0ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty-azure-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa28e6e9f65c1e3b9542198c8bb881f7bc8e191c136fefe0899ff37e91a8f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-gold-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a076b4db2e424997d86ee62985e7219e74baf0d81b0327b5e3260e63f7a1d634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel-aquamarine-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d2534793dbd237d73ceae628dd0ba9cf5621843a98382ecfff24025e74ab26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69734 Malicious code in optimistic-cyan-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 337c04fca762a8467ad90d660a8de36858da1694d0e2f4c3ab139d99891f25b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united-plum-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea82fdc7ef193e7155758160395eac8f6aa8bb71637d861681cddac5d4f8a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66905 Malicious code in aware-green-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ecaa8e5d489da8fc6300724abceb1a13ab27e726efeec892bcca01bc50f371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66956 Malicious code in bewildered-rose-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a58f77e32fdc6eb95a1a2a81fab398e5fa00a338913b8dedfd48553b3fda475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69331 Malicious code in mathematical-white-alpaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce8b55f5fedffa444a7bc63ac7eb81db4c2edd08cc80ac9d04120c1051e7a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab7b2920e292373488cf3ca9aa3c911a9636a0260ff361be50573523c8c360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68163 Malicious code in existing-purple-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6b4be112198f0e21333fcb146b8759831724822f1f94ae72d6fc60283c0d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...