MAL-2025-165106 Malicious code in riyanto-122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e7d3edbf65a44f158f66ac57ca605601a05c017d8ebc6e0bf846884dd073fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150205 Malicious code in @mipta1/sardf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01aa05fe7f08ec7caa7fb68b35895e1386c28c75445017429ebeb3d028bfe965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161977 Malicious code in nasrul-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8a38425610e657f3944db528db9f00ed620e6d28d604899907be49eb6043fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164343 Malicious code in poli-aki-alub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1e04e8f8427b9c3f3e9ad63c55959e75c5ae2585d8a35adf6c415ce899b09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160038 Malicious code in manurung-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5ddd822e7a1293e76c1bceab2c482585557038b39dcb9a35df10ed2515c12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154567 Malicious code in dian-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7e197a424267d2b2d4aa3155f9377b64b4d7d33c3df487f8ad894c4367004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156158 Malicious code in ilal-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a107f81dfa863dc9b2edb06a41305ce8164e2f6e040ee256f9a843c379cb9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149943 Malicious code in @mipta1/asdrar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67094d4e5a71da93bbf6f94f4b51b38ea2295e32d06425551f7be1569abc7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152644 Malicious code in andriani-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b40f6806402f64d2000ca5201cfff139e49bef77e5ec8ccfd3a66f77a41af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153343 Malicious code in avminh-afaifasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c262fb1ff3d480d56c1144f6b0abeafc947be3225a5287194b32ebdc6a7afd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b00b2dc27ea8eb101e5027453fb76c3e6f767f8e5fb9449bbf6832cce4f633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gafob-jagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2db76fd07653329e34074a8d27956d0d45d6e058e764a5df090cc1cef75fe4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f1ddf20856c832a6bdadd5c0aaeb9bbbcfc07aa289829ace6398b66109fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-butsa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ce24e6ce9c218c8bb454902659e88b1a5ea5eb452a574a1614e5dc269b1724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tualsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819af1361173f0c7dd11cd780f41fadcef3ac4ccfcb60abd5bd090f90119e375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfdea86c60b0ba960a34bcefd6054b1c354a991d3dfcee8b2a3eb6119ecf69c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 297623e8e05c32953bdf684bfc70eeab1c725b5452f8ffb4eef613837178882c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd9fd2ded300a84645abef264786296780f0667271ccd13205e312bf1eeaa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayca-ama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cc8c19fc336ce24ffda2403e0c74c931996bb026e8fc9c0d955269f2d3fce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0d69a8576b1df8918821194302b98553a85fd3840fbf9b7a3bc33ca508cc20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...