MAL-2025-76126 Malicious code in wati-kue35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66005e1884875acfb1858dcb826fdff4fef2f4309df5b67d5286d4f387d139d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74094 Malicious code in laila-serabi52-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94174b635d4d7616feb4bcfe90cb0a94609f813bd77470844bb7741aa237368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73609 Malicious code in iwan-wajit54-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a46c275230ec909f9b4593c845216042e7f429fabac395cb16212e6d62a6721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international-silver-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd92b399824949e720cb1655d6867d711999b0596f4ec133b7d194568b7c5d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold-cyan-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca9721d9803ea2e130a37a3e3124aa8d77988825955f4fabc0b856d6adbe441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68354 Malicious code in flaky-blush-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431769404a9a8f35c84ce32881d885e272581911b60c40bdc8a75f8b544a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67096 Malicious code in burning-red-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca78abaf0e74f03764c4be1c98482848d5f26cb929a388e30220270ba69ee13e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69521 Malicious code in nakajio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b3e418efa6d722ebd2fbb14e98f45494bb15da905ec813fbddcac9bd57db85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69238 Malicious code in lucky-lime-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67742340f3615c105d88c733b19ca0c186f5843335f10d893d0a43b0533567bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68510 Malicious code in genuine-salmon-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c08513caf509d1e88c70ec771b2d594afd96e10aa8c37678ff9167964070f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68924 Malicious code in intact-beige-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f40bd00df3fa14afd0e27eb130a607639db01e259743e98838e97a8d424ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66837 Malicious code in arnecx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef0890fc873f87e37d5296c5f26e0e7d194277a2a589f0848e17850d7d4fcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71661 Malicious code in xenacious-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f769e4fdd870fc90cdaa64d7fed81c305ad4ecd812b5c4e105ad6cfde90c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69569 Malicious code in naval-pink-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c3278f2135551a4f1647b59c02b49870cc133d436ea8577cf18d2c34cc4604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-violet-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4f145c201c8c2a3eb75e5cb653aef95cde826439e92618f4da115075f1d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-cyan-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fca3a7b462db2e0c9bdd74555f00f28c29f87cfdc0f55b424281c3bd93ae4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...