MAL-2025-72406 Malicious code in citra-mendut72-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723827e2341bd3a5cf8879bca4ec9c64ef9734dc37034560ce7bc91a9148add1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74831 Malicious code in oktafian-klentik69-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 226acf24bb6717da0c91eb56ae2709389ee7d39e6d3a4be8c6040e64bf9ec93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75702 Malicious code in tomi-keripik82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fdaa0f31eeca58dc5e2392c97484f0ae88ba61b860b1872bc84cb627b55452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-72691 Malicious code in eko-donat98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90127273b0eb09f2799a994c34c24026136daece6e8f920fb11dff7e5992a707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73022 Malicious code in galih-gandul9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3a2871522f33eb4047ecaea586776d6d71d80d1262a729ac5fdf8ce645fd4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faint-amber-orca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5791182eb886438626970f7b800fd9e7455301c9b62655e8b2714d0a9f0330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-aquamarine-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffb9d68e847cabd89a8d9d1f5442812a71518e49732af855e8d74310d6db703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated-indigo-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac184f70bc0fa482c5c115aa3a0589f49ca2b661907721f8a0b38490e4a520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening-pink-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88872afb0ba02951551bfbb343d3def874cb2a9a77c6dab9347d2ae946076d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring-coral-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdde3d1875c0e4107c0619040e5f959063955ed6722424fe08f70b2ee3aae9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-ivory-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef84e4f34bf0ab45dfe1d24ff80fdd4774aeef57e03da477cee7f62863c3f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile-tomato-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff78b3de8a92f8ea5a05ce91db4b9cf64b73603a239011682f515685736c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concrete-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2799c119d24251ae3ad925e7fb575fe210a6b1e49f7b0d32a8e79ff5c08d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive-chocolate-whale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19869a259e4e1cd31ec3886dde3c55fd0dcb9ce23e5aeff78f8073c10dc40acf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-fuchsia-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 377dbf16e1afbfafb4d844e40da7927a41bd66f4a032158ddb398c8c2222f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big-moccasin-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0327b44b65149ce34c1053a52bc8438d9395b973fc584f3e01086bbe4d4d7a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent-silver-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5146524a5491b8f8b5b0d7c09096983c8cad001e274ccbbf4cd31e4e6fa070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy-amber-jay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d51d04a14711acc3e5341977d5e9af8863614c53ae5f9b86ffd73ad18da1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pents2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691214dfbecd05bd8282a194106b31e1a651b587a045e4b86e5a83c33b43d343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...