MAL-2025-152920 Malicious code in astia-al1f-daronoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c214d8e14fd89e62247b8ce6b14c19be06da58d73700d9a72b43c74b8df73cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158422 Malicious code in lookingan-nalako15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfbb042baef7080e37873c603db7df4c374a3f8cc9938b6530608afc2291d524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155720 Malicious code in hariyono-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe530039a912d404e0812371d55a571a1f4556601a8f6d1f7696f34452a075b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160845 Malicious code in muklis-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875a5d4a0a8525cf3e59d1faa9fdf7d9c987e7e96a8474325d22f2ccdb55cfb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166352 Malicious code in sunden-dilak-nulikanukinatain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9ce49a3437bea14499646be40990f0b5cd40800a28e15d61493cd26ea123a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168328 Malicious code in tealove-lady22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388042abf0a863cd8d64350943ad5e07ab6e948e8f87608b61a219aed0705b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158350 Malicious code in lookingan-konami85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da62fdb9d25b2cdef5f42214fc658b73da498dad6f3877190e5bb85ae976d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161646 Malicious code in nabuf-otomabin-nojafgagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb3f644966a9bea7ab0b3111528a8e6e0f99392bcf4498673eace3e216c9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvali-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d474f952af1594bac549ad07515b2fceecf3470c6aa71b41795d8cbeba22aabf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3831f95f6c886a63b570e366399434ed2b8cf8018a6afa2a608df475098045b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabakuoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58ec9d95374efb497de4a6bdf7650f7d34e96917df5acb4a98f2d63a1080c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8498479030399b1e56c3e6a55d54a4047e401ff49cc6fa8f0f9724889c689e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-moilopie-aroai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f64ca02a7266eade71ccaf313f364defa6840d1078ebd7fae473548e88d7ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8f87fb95eb540d108fe64cf94de41c6312e2547c601922a67c610234529078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufafyu-tadamafdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8b25f8cd88f98130127cd6628db6b30407cf6973a772c8dca2eb18e1ba5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-ujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3571682adc11a6fa1a8304bfac44fa876901bf2c459e82485f8bfc4c9a8930f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745ca5b405dd3235a248750c3d0a5fcd0552a4aeec0e82e6f20c1804a3b34214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a12095182a4d7c7fd0f454ce97d3877d9dd2369da28bf3ac104d33371820d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...