MAL-2025-154223 Malicious code in dajouka-tfsfcdd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee0e4cac6f09be231f160aa4ccdcd2a1d1e6a5fc0bc8bff262bc89f1cc2a279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159311 Malicious code in manadi-scaior-daraeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de57f48d208a811cb0aa79826b3021ec36ad1f6534ac7a24d049306fc777b58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153799 Malicious code in bintang-tea8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6475f78315a82a188e11f57c94f5c10302105496632ebc6e4c9a20be0b4d4797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd547c40c0b120c7bef0ab487bf8bb7b3bfb639fa1e6748a270e3d866f147bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1580e43ef2e0d44dab482ee9b997f6a422f31ec78a70f8e9ab0dae8ef7eeed8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1179f7a3a939085ba356085459e7411ca589021632a27c0c2b169adb8643e84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c153549792c179dfbc991777ad7365065f40042ac3e75ecd40423483cd5481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65551d27b127317b089632b1c3040ca295b4b08e1b2eb42e20546c49775e9522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49824b97094baac83bcabbf234fd46ed1581e62f695257b619c66ac8ccca8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cd4a233b6da00c404d30aad0c7a69337c132d083bd6fd61e10f448712eecd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42fb6b377659139a8d88ddcdf293c833a13c5b8235476ad1e0e89050c38bc47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d28da388bbeac203abc19deef448014801e2bd9f606e580332f5264126a7c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dda2bac454433130dedbec860869256e13c53a700c798976c0a1c11edb3c487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-piafofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c929f42b1202ca4208b7d1bdc6a0ef0ae9d71f9bd43c7cf8c59e0754286575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d8849a21dfec16651c294f221fc95be73ba17d100d5b7243f387e42cf7849f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfda95dece49c349bb015229e75859eba93473f4cbe3023d9d9268f8f77cdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01490d8978af02945321584af9065ffae92a771453b31657596722cea4dfe34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c1560c84c002e674f5c18fc39fec41dd8b835a90237beaa302ff937607556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3273026c79f9631c3639efd29aa3f83840cce12c0418518034aa924d9252d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89caceaba6e3a8cdb88be9c4ec46552f0b6a5fb22701de076e074a226bc55b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...