MAL-2025-153765 Malicious code in bintang-tea18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410318f064a4e0398da75da5bfe4affda44346b84d6942bb5b4d1448bb702336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166905 Malicious code in teagood-lokika40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2865d9808951cf8eb88739265e89493b2f8c89c8606e0f86b0d973aa56d9fb12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163495 Malicious code in nokire-zabuza1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391b5b5959fab5f35762e3f51a9b7766ca8de07c3da14a2de31d83c667a1a7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152465 Malicious code in alvira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af79b3a7520f4a4dbaea0f53cdf301781e4ed5b9405700a6f53fc3820d0812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-naiururl-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b16925fdf68f15b7a5d25631eaba78a88cb441f7680d83533491781b0404683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156130 Malicious code in ilal-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531dbc33d3285beedc8c76ab601cf2a7c4a4db0fc41695ec7c74c0af63672062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb701e091c159aa4a1e60ae36d4be1f679bc7732f54fbaefb121bf07b3de3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0959beb6f8fa6d3bf3adb719d79ece4c3d465d821de5867bc0f2ceaf4d21bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwnhghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51e962ece28c9b7a82c1b1733559a065312d49d8377221b38bdba35a7d961a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-buyatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93efbc8f0994a07a15377c7a3c177a3f11c4b5a6c785012f602643fec88136d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf835cfe210b9c2fc00c17941b1091207786837a751fe4593f8974ba280df35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eda0682a9b52d041c78d330bda7e1dcb4e0302b4c09eafa181600438b94c02d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/koad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4ea1e5c258bb58ec8ba4741c9a2292d912fad98b7327953bdd433248f964a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mayfag-trega-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bcec0ce30837ae96b7ad719f33e515fd8363647a538b7eb9f34341b09d02ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a78fd6866c6f7d459bf1f9bd97f9e08efd6f02410e63b517f95a8a9a429a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b2e1c51e9242de023f009f9f2ef76e69d68ff852b40fecb0b4293f6b864706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509c36746a9ad3249b72c8953d37d3a86b7b34ebc4e1e0513dd625011b02532c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djhhoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721694127e3a360f13dd96bced35bf2e7614b40590f4608cfc257b9a6f962c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0c3fed44bcbbe9a3cee81f81e41a775310a63bb226b87ea5ebf52c28b727c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...