MAL-2025-165129 Malicious code in riyanto-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4cfceeb2e1623862e026e34ddff93a39ed48098886c041ce572d52b5836cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169200 Malicious code in trevora-cir144 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c5660831101dbfac5d4232b630406cfa70d2f84421ea9b0532946ecdafeda9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161778 Malicious code in namadata-munaroha-nadgamfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42884c2343922c68ec85e0af033431f4d51e533a0b28c22694c1666dba0375c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158701 Malicious code in lookingan-namakita85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a1ec97303841ceb2c238afd04ddce3434c47bd341f318fec7095ebf69639e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162272 Malicious code in nokire-akaza58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab61f8b7225c009451f43d2c05ee580bbebfc784dceb177dc54196ae12b9c80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kil-akiualabanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4ef3e843e08dbfbf7d9e516e7ba714d205ab4560ad2d633511f0b23d96de59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838cbe2cf53956585392a543af3943702f076f8051b8a28009064e01951c8c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59949fd2a3ded355ed70935d71d06a7345dc3953c087d2b14e504b424bee5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09da7d8a38a8f948380b68d99990212876b2030794414126e58918a8ad50ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafu-tuyaudat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edd97823c0c1e3d1d5291028daaa1fd0614193a4e1cf359dc67502ff875f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151232 Malicious code in abiba-alufuai-ayauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052fd4cbae177f3cf880ed2b0c5df8ec741bb52d33b3ea5619675641c3d9569a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-ufyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076a6c0ac0b4df05e5b7762537d506392b591503277dee03c10af65c128a7540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/diun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be556116e6eff44c31ec222847f3873b0fd1f888b981898490d13eebd3e1ab23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b6c752b3f4114d96b4e3355b8965e96076994806f1f5b60a0e3ad44ead6892 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae1429a7a10191a728b656ea7cb091a584eaf543e96d32adca4bddb5757d555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofaluib-bivaluabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f587d53412cda75f7db884ff22e0046964ccb010fa0b9469813d373d3622c9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6a9c632462f742081bcecb1f4dde65945e00be762a9afc9602363bfad634b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164388 Malicious code in polil-akilamu-lunakiuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c24fdc5648fda5df0f49b0461438674b8e9603fa706f8b46042ebe358c501a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160365 Malicious code in messi-tuedda-ghdfz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9016c21eff45b69119fa6f2fb5f31bc5c500a438f81f98ed1259d21059175f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruanaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4463e3633ddb9dde0d0bae40a7d651126aa74e6332c386ad5aa3db469ec868e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...