MAL-2025-157526 Malicious code in kentung-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae91e04a3de70c2959781c9be1e4de3963b246da570e89cbfa52335828af1226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162618 Malicious code in nokire-kilua30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8c7fa4ba2aa8e02f54fdf0eb338d928bff7f489cb4ee5978ffa5190a2c6412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0055c08696143cf961bd9cbf2c10cb6b4fbcc990d6312aacecec8af3eea93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-sufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facb40567e7bd2589c38e1629d7df1fa39660a38002fb58d8f7cb5e21f8ac52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-tyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae5707a97ebf3a7984b3e65773a49668550bcf09820ef545e1a019ed296dc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902319a3bf7446f2af4317d717d199a320ef5d186dd40858be812a18924d28b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30509c490e8f2112b57eca8930e160c2af0ed7ed1a7defbfd88f77785ed2e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f832ee5cf5d97b0457284ea92d687e93b68c6e950c32ee08c218c2539066fc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f67c8841d42c3935b58ad59d728dae977f00cd1cbec4b2887544a7320b6979d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehadaku-qess-ur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295935b6bfce8fc95b61f1001eebc3593583118357235345be78284744623051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da79801b5e2c0522b67647b4d785434930aec8ae0cd3453818ec93f2ad0de11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dagusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e3ca3bb0094f82081840a8e87f397a86063abd08eb8df2956e617fc2756a77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c167a063db3194c88161c6101c3b46cca21205890a1d514e8add557375a6457c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ae206616658b902f72f65ec12ccf13cde1742a822e7069ac5cb13c162cce7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nonata-mutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 357ea96ab23143df31c0a48e9368cb52b0138937173183de0bf806ce23b29bcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-bua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f5ae5497ce9872364d7e9716e1fee07c5c572c02703e7685fcfe6f7cc91a9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bismsau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc36ef1cd9dbbf47b1ea48d754a410725c6b5e833d57d425e5134df6cc2bb3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/htssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107611e4b2395a36a66c47074d5fbf3a7d4e3a35ffca6b8487ad796faed1f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...