MAL-2025-74889 Malicious code in patria-kue3-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fb50a8fdc302c5adc5e83270dcdb466330c10093f753f37c7b1c323b66ce3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76188 Malicious code in wawan-menjes33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783520f20c8600abc08b9e3a96bdf449ce095f522ac81e0511af7eaa9de3e131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73733 Malicious code in joko-lontong16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea41d256a0c5b4f5854438a5f2f58e7d2d6623201a3469de9fcd7c2266c3b3c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73696 Malicious code in joko-gembus31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ab500475619f6f68fc80f60f5fd00d256b38ade98f163b6dd5920a9491c1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial-orange-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743f3ca96257188850168c051bf1db1488201b22c5c9547e942c34aa6520111e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning-teal-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05965a757c2d1efadc5f66913ed48b5bf91218ee60ac9d5d6d4b89fd169ced63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-bronze-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b048a79709b2799be8f4ab41ecd44a3fb9e67127edccdabc9ddbf42e5875836b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic-ivory-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e44e8a5bd7ab03f900103efa518041b363124bc48dde3e97b653f13ccf0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative-yellow-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537dbe03284c7d8084295d89f227b56d8139b06a2025391f37abf9ea37cc0d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-black-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85613dd75c60a540118983bdeae25c457aeccbf85f9ae9a8e702ff2c22424e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71028 Malicious code in systematic-fuchsia-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0857437b7a75d9f699ecc6586ce55e4a43b6e9c43b19d120e9f1abb4a2d0764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69460 Malicious code in modern-peach-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511c60a346d5b0bd892399ea8aab34dff5d543cadc59e1cd9f08d03bfd80cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66985 Malicious code in blank-harlequin-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4ba85309dbaae23d0b6ec75e14d0dfc8255801a95ce5fdc28518464b62cd3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70663 Malicious code in slight-scarlet-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f2726a87665b474848a451cf5c0736ec22112266bb48a3c9f0b175f0d5b104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71382 Malicious code in useless-tan-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa46c3e4bc81f78f8b6eb7108ace98614c5e286271b451a7c377217f587ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-blue-porpoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855ec46d32ec3b98e4ceccfdeeaa05fe4fce0ac347aa7b29a0824983dcf1b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfair-salmon-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e34b794d12c6beefa8a27caf7d73a74665ff4b2c5219f3a376e6b7c252a385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding-peach-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb585e000428d154a8ccac25963434455373163dde7ee81b5257c913bd4c045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent-harlequin-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ce62ecf856142c7e1b37b62c3c4983ed88417c7e1830c0ab065e9a1d77c7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-fuchsia-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3e8af5fa6ad4b48fd1f2fb821db615f1eafc52386a403d9e789f33c05b954d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...