MAL-2025-155717 Malicious code in hariyono-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25303934a10b7a6302c8adf799c7244df48ae152b1bfe8499cb5ca783fe587b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161940 Malicious code in nasrul-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230b7ddea62ac2c547d9e9365c9cd21c2ea26e3c1b21bb7d0e6b59995a0196db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162861 Malicious code in nokire-loklok100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 238e248d802d567de8521689c9fe9fea52c984747759a9cf621dedf4cd1b8254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163443 Malicious code in nokire-sekiya52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fb684ac595b5db112d6fe5406703e610aa8484793983878dd123b138e0d192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163049 Malicious code in nokire-nakala91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce55d5af2c49b6cd30931e532611e60e34a792945291c7c40044ebff0f7d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d809ffe58acb802a1e397eee0b390b1cd696efdca0ce0d86b3731c9bf89ec4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-au-idaduasasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36777ca2c4664675e88f1d8261a8236d0bea01df7dc07d774a14011c2dc005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibna-mibiian-auruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c69ee377e5f598ae70a5045bdd6a00e5b5e00b26c41f730e6462c32913f691a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa34a72db2b03e5c6e01f852adeffb80d8339b99b3b55fdf841e639c39f28b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urt-efdsdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be622d5796414a3484d70dec7b9cc7f0aef2d41a3c7ea81c8d57d46209938f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-ifafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39404df6d4e961cfac374478a87a63286164716ee52468be3cc1a873e176bd5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255de9b71db302b032fe9592bcf8ad59f2a30c61c6a11d2e246ad14dc8ee00eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptahuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff541f7fb171365a7c98325b660d5727f3e153fab11754d705202aa703c0d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/a1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a9a9dd9ab62ffd2fe7edd46cc30f83ce9f4b50532961b692c98cd818bd85a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safif-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 280890ff8cb03d18639b346e96683084ff5de1238387bf8798ab7ecdbb0d2ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehada-hzhs-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34e896a3d0732cbc8fff3abe8e6771960d3e65f8f8c850a709a81bf715da545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af16491bf63da7cef805273952bd6fe9d5df2ccfeae5a931a7d153c56d6fb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae4944960f0056b3095eff5f68b7da4e09a05c431e611595ab10a27b2b1566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab2f9363de3057b4928947cd4d143f48266a283188c7f870173993a1aa8d8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ifargafai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca458cbf014b2d4589f64ccb5b49da88d7c8c9af044e1bfb141ad7544b3933e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...