MAL-2025-153350 Malicious code in avminh-afais-fabfoiggfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1046bbb1b2b23c4ef1371d18f67831756d24a8b8ce8b177aecb9289e69376c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157108 Malicious code in jimmy-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcba984c2d1ce47836f9a3813ded45121348746edab382fc460f54ab13842b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152048 Malicious code in aji-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa4236128f6a6240395ab4908336c0e7267e99ae2e6d6f7c35fc324e25e3f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160871 Malicious code in munir-butssdya-sda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094a2aa908a746c3b3ff5a5e006767608a6e0e63e62df177c6921a74e00a1d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c85c27d0cf898728530fca2f4339e451041f79533dde831497a2ff7f4553da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9cea356af4d02c28db8a77caff74a1708950441e16fbf8a2c6635277a4807b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79920f17e17991b4378fc2230bc9cf83ce72833566355b1b3610fce86620fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db27fe6dca4aa69b5a109248e144bf48454ac72bba21af0db93bfa1c628badf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamnanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29ff056fe35cc0327de041fd62d2b4da80bac7ecf90104e39cef81106a337fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea7341fc30f85f70ba33f58de39ba868b7fe5e64a20ed85b1becef1d74be29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mayfadga-trega-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0106608e22285b0a9c6dfe5f38ca689123492a46f26f9bc5e9290a3fe77a7736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayica-amali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2085d3d2aa4816a052b7e0a4f404c367bdafdbd859ea1bcd2e89482efd10747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674f6ae9388e857c3e7de41f71a34846fda3587020a991c893006c8b383653ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85179154a578fdb4e42afccb20153b6c701c5cc7b5c45fff992f13ac4a26d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddeacfea33c72893f3437f63b08bc3fa00e315ab8bc0b817b047b2510b7b74ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4689d7023719506c702d69e23f97dd990837ad4d09addbd26fe0ddd00ea962d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaiualibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b36f484a093c68acaf99bfa6066913f2ffe34a84b0c3dd040635a285b53d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa3b7f0082cc902ac72d30c19dfdb9f44dd33ad1e212e992cb3c175c309c1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534f8dd40b41c73f87d2911a1cd0ff642b5f022b53e78983d346674aeceb489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a3bbacf91c173b269763d65f9dd13bd52286ca9cff6ff2c2613439ad9d440e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...