MAL-2025-74985 Malicious code in putri-jamblang44-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3b4913c7b92edbb34d470c16c2cdf2e4efbd0d61990fa960ffe9499d53ff15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74449 Malicious code in mulyono-getuk1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e3f19cc77680b68d52536ef3fc6e8075497ab69291cd3929d74fd5728522e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-74917 Malicious code in putra-bakso53-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40f31f78ef44868c79eb7eee0d3a5feba286d10090aef4b6a3187207db96e8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75333 Malicious code in rudi-lapis63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215e29d1c21055c4904f19c6d9a3a6f5da8cfe289133d32e1879155d112b8ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-taiwan7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30607f3fdeedbb0d7c36e5ffd48da46b891c687f1f164f822290bf1c551c9690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-gaplek62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07522b9e06dd2d72d7ba381cbc887b2ad11575cb570daba6790d6dcba45261a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-violet-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea795bfe44fe4667cc7c648ba9aa25928906582ccdb1a9c9108adc9dbd41eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable-plum-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e47b21979d4eee5217f451c37e5ee4ad692e81b27906507e83bb9723ad7e4b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given-aqua-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fdf20206722798caf1568c47e9bb222f45356aab9e739fe6baa55129e69a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral-pink-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb645def62edb4bee8723d3d08a9108dc9c12888d6c28e11632855c35b2d21fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-violet-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2c08d0a033b45b1bd99e0aa217f7692271037e781ce6c17f728c9b3b3191c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-olive-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac10842dafaac29c25240868e9f716fbc18a8e4e8dd28f8ab52982d5363227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish-copper-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d19612d963cde1e745732f0bce077c191b1406ebdc0270f63710f8dc1ece886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite-coffee-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb01ba1fd92d2f099bfb1548b851710688afbef4669cf71691c438814ae78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political-violet-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4f145c201c8c2a3eb75e5cb653aef95cde826439e92618f4da115075f1d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused-olive-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0faa6b2fc7eefa5085748fa905af2d69a1ea7b5171aa839ffbe6718cd312838 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68687 Malicious code in historical-red-lamprey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b27e01f7f9c8659bc5760a37693d01949a45ae0d3c2c77d02a37333ebf3952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70640 Malicious code in single-olive-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e45dbbd9ec19e836028d6cd97b286c209bc7cd614c8741e448db06f03bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67240 Malicious code in closed-sapphire-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c259c0f89aff7f17c0063923afb25394201fbcbdd2865660ec945c6b8694a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...