MAL-2025-173133 Malicious code in budi-me-lodo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf99b0a5ec0798c75c092bbc7a09b34448b9f7dd687289f02c651303d8b1a0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b0660768a7e3679a108a90f68dae07282de4e49f15eab8ef8a467502d4333ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6d372f707c431b63c80e7c1abc5d28efd902fc945b5682b4e338cfc858aee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153334 Malicious code in avminh-afai-fauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d764ed7f10ce569873834ae4e66377a1290ce59c6fde98b262b205ed6a5701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169179 Malicious code in trevora-cir125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1631bd1f90a4dcdb35269e3b28aeb97d665ad5ffe76d3c398f91d1abb41d7ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea86abc943e37cc7f8b5dcfc064499df553b316548d70669a934b03b3b23ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35f2383c035c4b940bb9dcde087229331e5668ceafa9b2db2d2387e2b9f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba09ea77b611d5ecfb61d0bd990afe23f5d469045ea31d4a9c0a4c97bb712c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916e5e606fe163704b45120d764cbdf6a50f0b2e73477f37b414bb2e5441160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfaafu-dafuamfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b4348f9237bc689b0a993e99251f988ced25c5d63ca8cf8d31aa04903ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikonit-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e582710eaa0a202b8c72e5b5dd9e6ec6195aad7c47ae5744d2bb447b6fcdbd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagis-figayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c987adffe1f6a6be2de4346bcf332edce93bb955ec8e08e72a8508f75e4e51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde416349df494721ee22116f80ef148c248620a6c14cec7b111fb2c92458dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arhani36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fbd4807c612ee05db7d9f4f125b74392af9570f106a3ba6eb2072619967c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154255 Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31e581f44251d423b8139663e69b70cc8d5c09fd148194b0c8d2f7eb3983077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616bf88c6531eb9ec013dead1b5dee4cdc50b693bf2082aae3adae57d9d12a90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/g1mphser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b05d83ed1dc103f2eef575034ea875a076342e097dfc976e9987c0b268f6f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647ce8215c5816ee312e689ca6b2fd8a3491ca17d3f2017485daf11b971153f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160864 Malicious code in munidr-nerf-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a31d9ccee1a24af86824f292743d39c3ffc7ac8054ddba6bb403a7af5c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...