MAL-2025-155245 Malicious code in fitrok-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02b7b62c95a1491f79e9dc5833d01944a3ec4ad14b86fe97fd3441ec9d35eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155043 Malicious code in fauzi-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82edd86c24f6853c85b1184697561ba10076b67ba638115439838ae57c368c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5938f6165a44455470b2f0b3e287fe2935c73474afb1de277447c8b7674de7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotama-aana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8592d01e83f51eae7f1e02adde92067cce45fd2cf51ca8ff4901bcc7e8ea2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cfb9b41c153ac29d78e68ee284e85483dd349bc6e243dc3c2c6ccebd2519df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751b5ba5e5c4285f390b8f0fb473c498dd8fb0dd6ecf5f80de767a45ec836047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-ukasiamun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57254a196b752e0346a9a7c461156641289aed3989d4166fddb5e58b9679af7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ae206616658b902f72f65ec12ccf13cde1742a822e7069ac5cb13c162cce7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bismsau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc36ef1cd9dbbf47b1ea48d754a410725c6b5e833d57d425e5134df6cc2bb3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/htssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107611e4b2395a36a66c47074d5fbf3a7d4e3a35ffca6b8487ad796faed1f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dilak-nulikain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f794578814080ef5fbf55d38005b59f26b81a2521bd3eb7d02de910750b80fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652916d59af648b1276c4cc919546c75086f97a1f423095457a2861de3fa3547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maonldzdodadgfuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c93931b9696a01b1ee6d0f5bbdf72e43517c03a05740b4394ac740dc1353c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2dff06895b4b9f2fff582d1e21f967dfbb085362e046bb9809d3ec1b68e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d39c63373ebbe32787746fc06593d6be06e6f3fc99ec21eff8f35cb6d9e3dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f89e1cf421f01bcef0647197985c517b1214ac548e57dd3541e310faae87b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-faradda-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58260ebe9f89109283f95a52276f189cfc13c0abd250b81521053f9b828db1d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-monlai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429e4820f179fa7cf6ceff951cf70dfd4f67c3e9254eda759498efa80c5d588e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...