MAL-2025-170523 Malicious code in verify-ticul-bisuyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3b3f9d0450f4f5186ea7ede586e67d9ce0398ce0ee44faabd891d35d6e51e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabut-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c398eb35ccc114cb4001e25e7618749affb70a81aa451ff45da84c22eb5b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-nyabutua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69b4d5a905c7e34e312daba9e21571080542c9e0532fd2af1679561461ecefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-babakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f7a85168a0248c0cbabadb2243e8331cf712083bd862d69e19ab0a23077d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d43ba53882834b97dcabd6ae10ad8ff1b110f629784cea93d72a224899fc61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b64211017de7365cb0212c41e62249b1f13b82307a513d864cf14d029d078f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166613 Malicious code in syahmuda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69fb7d39d32d3ecf66b73cc0b4ba2da3c05fb02214ac578f4f0112200aa87e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-halley-pm2-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b550f4c21432c547db7803570839488aad6e6d7d907e29bf2f2bca16cbeed09a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-library-solis-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19a15bdf89ef12889e458c44d98a1bccddea5de11faadb6a83e25501fefd3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-cressida-callback-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c77ef0113fc08e0a50e8478f17c2181fa693d186f69010fad57b5fb1a431e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145958 Malicious code in parcel-europa-publish-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a09bc38436786092d99a19e3bf9e0d03927398fd2aeb6347409e17722db57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-keraktelor51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55df8ea062d2f857a5b778fe5d229f4f907ac701f5d1eff360139ccc2401c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137332 Malicious code in tiara-wajit70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180f2d4fd4fe45559b298e4c743bb453b8a9f42911d95aba19dd9b7bc62d2398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-martabak91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ae50bac6ead2ad3d9c542339ed6af5f24a0ac904b81c87b4c4795cd2fc6c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128538 Malicious code in maman-sambel20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23a77d35782343aeb017fbbcdc11f47bc798c8d1d1592c5b8d7ca01cc2617312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125107 Malicious code in bayu-gorengan91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede6ac8d533af80e1b31bcd5a53dc16170df885fdeb3923ff43acd305b2c6060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130690 Malicious code in tuti-kue14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d038a533687a6c523fc8993f2d7c9bda38c1dc0c2ecc7faeacb0b01b32030e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-brengkes28-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569a519d31a9620c75feb1f3db8c9983b3cb55dda60a383aa00239a218855058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118707 Malicious code in andi-lutis94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4417770f92c13268d601c1ca25a13fb085aea76954c7bb26ef2f851fa5b4729c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-kripik60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568beb19c27fb13f46ea7a27c26c7350d304605b4990c8fc38c6fabca1967eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...