MAL-2025-164769 Malicious code in rinto-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1afc31306c55156da72326b6d39835fc31da3413e78265001aa26b5d3db32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunuli-nalikuia-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf3d400f0282226c1bbff272dfc432cebce78001667e8288d02624fcb39b768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118e93e05759099e68da5911a4b73a4605dc085e3b554870dbd0c6b061af11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/huoda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ff6ebbb189999a03f9885a3969327b8793811d71adacde75a23134624a2277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acagiyuyia-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28cbd31c7319d7990ee652a79038dd2a2ed33e18d853b42ffcf526580e4eca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-ala-makol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bc8c6c30888429a892465e76854ee16e805cc40d3b41fb5016f1b019b07bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe56c7e53a903c73b736c8ee7441a045f160b9d13f638181e556919c411139e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-luauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e8d132b415197dbf6b1824ca1328cd50f2a5c117537caa7382cbd898e49a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f177e27bcc87a709e665deeb3b05d997da6856d91f6d02c30d215fd4d28062f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safif-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280890ff8cb03d18639b346e96683084ff5de1238387bf8798ab7ecdbb0d2ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b175a24666ad40c839fe8601500b8acc945d3cc285319156c06c7ff18a50c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8580f0176adc7587539afc6121c3ab3eab4ca59b94195f1f83acfe7ecdc8317f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066b2e53a667688f85eb2b439a8815f37ec3d3401b0339ffb91b834a31e6db65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-braew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a9c27ffc69a6016ef9014a9ab2e2985d26e398f50af042f046cc046f3ede72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae75d459018ba73041d779172ebc67784409d13b9220918a77ba63ab75f6c0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c532ac9fdf50f9aed6e6c66f1602e76253ca2e737b3e07d7e85739ba061c8d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5463b76a393e126565de2a0da09ec4613e24d7c47a7e0652dbdc6ee91dbcf293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943d5556fef7d03d3e965ea5faa0b4dc625c790bc89752b62240fbc0a90023e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da1a455a63c5be5c8d34df8c9d0373f86a467642a2b23333fb42d5a5fe4850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159120 Malicious code in mahnud-unagoagi-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5050805878d3aa1a6c36776e202252c096503c992996e527303eacd40c28636c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...