MAL-2025-158291 Malicious code in lookingan-konami31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f9bbafd8167c4b226fa3871452368919719105e1c2188bbd5e6e41d8a4d0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162243 Malicious code in nokire-akaza31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46409f2624362cd22dc0b6c3e199b145740f44107656dcde90ceb834dc1800e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156265 Malicious code in ilop-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e66aabcc0d1dfce0c5f876ca005a4becb8ddff119d84fcc4016fd2ffa921ce63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161940 Malicious code in nasrul-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230b7ddea62ac2c547d9e9365c9cd21c2ea26e3c1b21bb7d0e6b59995a0196db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162003 Malicious code in nasution-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96dd4b105e456fb7ef07fd6043bc808fa204925273fcd5a71efba642a68bde6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-uf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0687462cd678646631427f71a41bf6f72ce2abb61b1e13b2c1a6afc220d418d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d4cdee947a6ce90c6019d3be9a4cf0b2d85944fc311aa02f9bac3584d4eb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa51bd51158547e5586cb41e14d7957163e8393df6c32a0b1cecd5630b6df27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5187ebb8018dd8c4e964433cda3b616c596dcb42b06c1d58c25fb00e05a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fiyss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bfe9ec0a6c363f7a8de37ccf9c567169e3526198b830932ae8451479b7ec4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00bc061c4ec279b9464422d552cfbb4cba100a0026e74ecc89acac95345a1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf1a8253c6b50f3bb50003990fa3d87989d9561d20364e1c837a098bfc3d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3f3a20b8cc387de90f2e1bd7494f41fbff66488a04d2faa358da480081a2ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutawadar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6c4a407c3d7e2296cf2baccf83684639874da6c7b92ff55f02d665e055d9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fr-fauda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6ab99e4249997e7749c7552442b32ec365cc0718709244e7d0af1bea8d8c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9da8f28a391d3d73ca1b090619e7ecfa650bc8684d93bcbb1d1f21cd136641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/guykk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7804e98e286d248f7454361fbf6f3e09aaa95663159ea07b44dfd807dba84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec25d168f324495a15125ba9371c9323a299259fd3d7718ffd7ac0516a4b2831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d736b7c746d35763c7ede78b9ed975a40c0ea2effd2b2de165840672943eab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019dc800520ed3a389bf8d6c8016907302ceef5e86b56b2eb4ec33edb1b43e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...