MAL-2025-74543 Malicious code in nadia-ubi43-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdaddc5a0cdac12429529e06d8c7fd1318ca4050514e6a32ca790554c627110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74182 Malicious code in lisa-liwet54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa180e1fc78ae5c02d89f6eb168bca14195a3e9768a2c6a9d81eb4b1b0c80746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74798 Malicious code in okta-otak-otak53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13859ca37d7bc057122ad40a01fc719cd38e553a0ea5968a304db09b80de4fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75671 Malicious code in tiara-sasag72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40432afe9609cd09eb0012874ca82eccf49a0021821a15a73ea2dca37c483b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75014 Malicious code in putri-mangga79-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfacb01120fa1aabf7b9fd77ea0363c0ffe74e9c4f37e400a562176b75038a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76590 Malicious code in zaki-rangi63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 786d25e91cddc5ab6be2f81d1b5ae96dfeb4a7b33b4c795a34c4fa820a555238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-semur13-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5206371538b4965d0bfddf32f84a9e92b230aadcfa0669e130b2124c966b9fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed-scarlet-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e32572fd9ae5d70a5c1c803eb1bebe0ee660e2e816b7dbcdb908adbfc66a27a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allied-harlequin-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a58bdba3282e27345562457de488359ac66be68fc43a3aee7fd50e7c62f0b577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding-tan-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b8c513fc75375c836ad4416b6b0cf66b73ea8b4b34a38034cf30ee8c4a596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly-tan-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a74c27a1b2148b2bfcf298e8cc84ed106fedaf7d882d12938d0d2d7ed6a31d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy-gold-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a112a47cba6af55d4b274bb00c962f12bbe839aea5271a12a0ba0af61ffb31af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-indigo-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71206782601a33b90e4ff23a1577e66a3d7453b45ee3d7149099006c91f7535a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-ivory-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef84e4f34bf0ab45dfe1d24ff80fdd4774aeef57e03da477cee7f62863c3f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial-gray-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a320351588676a7c196e008492aa20f3bfbd720dde9f24cf7e926272181cb876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty-cyan-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca0cfcd962d01448d70139a500e37c0cd35c1e3af72f8b4ce782e5d99b953087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary-apricot-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e3816f6efa6cfd5a3a9a9047b31e86825b22b3d3439b2cfbe7e5261e6af2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-black-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f23a2bbed85773c9588699beee1b478fdb8da9b707da521c4d3fdbaa2f83f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-copper-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f01daade7a96813fa08d368256d00c27fb0423382bdf96ae7292f998c9cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent-apricot-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dd5d006e96e1c85df967c4ae01a143ace24ebdc4e728d134eb74a77c63836cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...