MAL-2025-149923 Malicious code in @mipta1/ajus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67fab0755d795d4220f358018a006f47dea0647281bcf3cb5bab00e6ed481e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152080 Malicious code in aji-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23147dfcf42d081c7f70806ae518c439579755d6d2108b25e3f717aac3c5987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uasao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34c99f5ff421606f908157f5d9c6f504b9fe958c9c1c8bc8d1a431f1aa12bd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125c072b223b81cb017dbd13cbdad9932569ca7ada32774ce87476f9af1ede35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153686 Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156924 Malicious code in ita-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1c45c7e52f9fc21e425c48e36be40756d7dd6320e8ecbe5655010f114046d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c8d9c91fc81b3f8b358ffa7eb7fe4857e3d6d3b64681ee310fd7d0aa4eaaae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namuda-baukm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d45991a0538d82646e0037ae7402f4f1c3fa6aea5b031c39e373ef644487c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe93576e307e1d02824e5846cf94db29b2ade50d946e937f59c079c5a0c4d3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675ce992f27e68bc6f69a7db2973cf2778837eb9afca9e8dfabd3777c41972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c6e05f7abd8b72ad42352ad4d5e6c4a855eaf81f0e58b958919168f6d5ce13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb39503d1c42883d0ff8fd04562a128849ab526aaf6e08b989fd1a364121420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c04d2dce27baf650b45ab6bb757954893aa4d06f0c6494cdaa1b2a8d407298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea067d512fcd6dd5ec1eb0f94ac68e68bc6d79bf16207cea2fd0b8c959b7db0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169157 Malicious code in trevora-cir105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd45d584cb4b4289c4dee84dea65891e6a5782d3f7d40e01813576dbc71b79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160193 Malicious code in masioaluan-ofa-dbato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35fc48b7775fab0b5f827d8bb27005d0120c983c58a434e050fb2a914fadc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158282 Malicious code in lookingan-konami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5a257bc1ae0ae858141708c6416b60e3c7ff7168a38a0ee6bc0d04e64e2d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-calm-think (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829085675098119c01dc98a5adfe838bd320dfa8345952fea980bdf7dbb8008b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152601 Malicious code in anaisis-pafi-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f145101f1937371294eb81a4b6c5c6079c7bd0dc96733bb0e72995de0a554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nosusuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9120f5c05398ef098efe01a1a249e6bc16954c2f54e2381b3e0a992215284e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...