MAL-2025-160950 Malicious code in munisdr-nserf-saad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245ee70a72c613014f8cadaa5d492f0869de0d5bdd929a323b87000a8b7dd997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154636 Malicious code in dian-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ee0742dc652f93735573498a9ddf8b9a7cda44ef6bf8ca9005833d1b4e7bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-aluni-ipbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bbee1762bb2cc3b7d86645c948a3c53df3ad665d45cdefac72837bd0cce1f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mibiian-aruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f03b70c544c6bd3d5b388f33255e0690bdb1a4f852b6195fd22639c916396b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpie-aroioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fc96c501b492d3131938831f9db96523ae595c2f4c770ca786c576cc402e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f20dc9fd92cee964ca755b7c6a5da102f09786aa4ec1288e69bfa23772ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9007a12da2d0ab2f5a604c6eede1ddc125a954c03c51a895e10ce2f3b8832f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e74bf7628a17f0adce99a25ab0bdbe4cf0e36362e3e048436fee6b18d3e8987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibiian-upaimumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9693ce0bbbe745088a53060533c005019cbe9c000b0a46afdf574347e0e96095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af51ce55571093383fdfd4fafd75c12cecb03c33b9cc550b734f33baa853448e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ghdt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1a4268e1cd30d5b1fc057b7ba0ff7679534eba95f4f30cf62de6c943c08ea20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eeee98d6abe12c377763d3f803892bffbb6a01511f6906cd42f65630bbc0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9b4f39374d9f313e1f09d3b3afaf604bdfe3fbb51b59e5f171306f42f62435 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910100d435909122e3da6a66bc1ff91e3b18d86511984aa28acd8668ac7a0628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77faa24731eaee1e69ba3896120b1a294748234483f4481709b8b4b81f2b572c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79321dd6ab42ee3b18eba6b5233d2dfd2645b487905ed65a2440a6639edbaa86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d8de7d9ea35970c288d0f363e829369e068d342062e77bc41693ae0ff6e7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168414 Malicious code in tealove-nameka31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16451c78cdba92ea606025340e8ffd1feeb0a14cb8c8e2d9c57b0be2c1c2321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156580 Malicious code in intan-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838d05bd2206a1db10ddff3753181f982e5b896026fd487e0da153d4ec23b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...