MAL-2025-76111 Malicious code in wati-empal81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4a315ace3ca5f5af0e854e2f41eb82eb96f31a1cb418ea4bf2f7aa45928f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75188 Malicious code in rifqi-esdoger28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f198326fdae83b9053a734681b068336cd29730145968523fa736895e011b9e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74717 Malicious code in ocha-tahu41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd790b078c9d4385ec579cd976d53900b612d656919d9287decbdf447982822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74471 Malicious code in mulyono-moci85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7c65e0086295c56e7cee2e741d5457b0eff7ad917c15da8856699e88f9e1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74716 Malicious code in ocha-sroto5-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60634e8c52dc7e630a809893daf1fbc7c5a252f89b80fab1941189445473c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical-copper-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1354ad7deb27115bf8a28b709b1627ce48fd9b58db160f5f97552d7993d1ca71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional-amber-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f4557eddfa98f3c2b08d9407da7f2f061561c6543f1bd6e5f02b4b29c10303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank-rose-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdbb6d4817666074de895b4a215b9771475cf1a4f77284c2613d3792942870e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm-peach-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfa8aab3ce401b3098d443a39e25313b00d67c28616431f7e9259ee71de4e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct-rose-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eabef9e4528b0703f8da8a80686dd829da3c1a345d6483a15f39c5264831d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind-plum-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b370361900bec6471ac8687765bfce6835d88060599ab751a9bdc5d22eb6756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lively-gold-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c515eddc135532b4f81f7a09a9000a71c33defed78c1fda423db1afa566b291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous-coffee-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdb471f1a3e5cff8348003194c3ea4d7198c60743bf96b93151fdf5f8db0a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative-gray-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06aa9aba89ba62134e7339bbab7ca0b3f89781cc44406ff2e1694b36b5b2aa7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic-coffee-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019c11bef911bfbcb2ba9c4528051821341a05afed569cb701fc779077b54240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered-magenta-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbe99cc750fac6d8c04139fc317efb47e14760aa6abdf994f70f6cd9b1642dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-copper-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bd70b4884576b3e287097be1c952d84606ab3b0caaf866197b4385ba9eba47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69556 Malicious code in naughty-amaranth-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf22e476a9f2d8ae31c482c3cd29a94773430e8e18c960b38f3732097aabb5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...