MAL-2025-181228 Malicious code in @akunsansan0/biru40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9600523062371b9df88051f35c1ddab8f89b1147b1b7728e0bb890314157311f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732896937135358bd1c7f8630d5fbcf18d22b885d160a677da8bba3055bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2636deba3531ee592478b89de2d87e8a042cbb957935849b8f7b452dbb1da8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281e10e520a5288eea662e1af8fca9f94c798d896ea49a2b975eed926f245930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1a7efe930f70a9cc305bb5bcb6b2964d3a3ea17922ab0e845b81e55fce3456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88f9f6ae790f692971eb095f3225b17fe20285be72e10394c675d365f8fbfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1edfc78e05784f50e4348e085c1fea22cf6db6a8967f21910c3605263e76cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974b9e8928986dc32bc6dc8fbfa38ebfb1819eac3ce87d7ab231c94b36e8265a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c9f826aa129fec86229516f86b3fcebfb20d5dd5d14a3d3d1c700fe994d497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4d667f6264be4da7008d4131b21566c3dd4b6281e21b0c05f6522eeb34e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130e37729f33f28bf37642d1c28d8ff81f04be6ba2c41f5a3f34a47f7316c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc159d1d03e8704f2eb85fa2d7bfdaecc9384fbf7fb4169accd8e9ae348244a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk5000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e11828162e3702541681140e4d3d91672280d30e421fd9d88ba9fb89ec6928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760fc35764b8672f159948588133673e83cadc18879c568c392864d3b7e9199c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d490935b719644dbece621cb890d9d7d6d9efe53e810824fe4f0ddccfd087f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfa20b7eef916345f63ba2a71152bcc6ba953e37d026528f05de8dfcc911309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac68f62b0d43851a51ab10e1d68ad0571283ee0782636fb5aeaad88964e64d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eadce8cdcf9587f89d13b5c29efe37321115206696aab61a14c8443a09f953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181297 Malicious code in @akunsansan0/karedok27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88f9f6ae790f692971eb095f3225b17fe20285be72e10394c675d365f8fbfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34f343b0df7488b7f863719450e1e47f94e1e132f46fa1898ba3bad0307439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...