MAL-2025-150572 Malicious code in @miptaa02/dsfiyb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72be52731702d0c50023ef2eb08608684d8841c5eb50b1f060bf73f1559e87cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153643 Malicious code in azhar-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ba0175a5defb8485f4f0ad83e718b0c1e15fc6ec44f162720cf778eb2eded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160176 Malicious code in masan-ofalib-bivabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7f02eba7fe7e5c4e43e453616800c0270df8d84fa6377b4d45f932543c20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149144 Malicious code in version-scripts-centauri-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d6970faf99b83ae311edec97fcaf1798e64543b4e2f79f1a7ef54c0e6f1d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149302 Malicious code in wasat-scripts-ariel-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820a675b2d5c57372b0369552e6b26d05b6da7a6a724eceda1fb154d9518b211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-pisang19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b5a6da915fc102c0b7a9ca05ba2a7c2bd43bc2f82d5c1afd0a64ae8c074404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gorengan68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17227ceabe6fa3cba397d25ec965fa7c26e503df0f08637497443a52efdcb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-pisang70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66adbfd1ce3301ad2dda133a1dc5aa7a3e6fe9b52078ebea04e51ec500502eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137643 Malicious code in utomo-kripik28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a63112ac79133fd97a77497b53f24956d1d4958ef7fc6f69b889aa521c5a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-nasipecel98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6431b8a43cfe52e9a5faec77a13e6c7d42425bf86c70991ccf9c494612fec92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ruwet86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65a5206be7b0066bf49999f40038b4c8471836391bb631c4bf7b165806c22fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-oblok96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60a8378fa3477048240d87a1deb5ced8ede23b11d3d6c72c0f224bc31a3b23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-bakwan91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224a9ab232ae15023bd5e70660a1477e906740ef6f6583d526c6e520f08f7617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gado-gado68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6128140cdf000f234c2b5994ffd526430d09bebd40c3473b73432e99b9a2ed78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125030 Malicious code in artificial_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebd61684e4359708576529faaf94e2499a4b43cf76c715c4a7c43e5491ca78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5204c52eb5c7b2328f8afea7efc5fea12a33df8fdcd8b91c27b410a21411bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121618 Malicious code in lutfi-gado-gado17-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de956a0596360e56e12d74c290d05554f7d396e67cd8dec258c99a0cab360d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119667 Malicious code in eka-oncom40-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b87c0adfda64b488542e73aaac900c51b43a5983cd4edf1483cfb3778e8992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119320 Malicious code in corresponding_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be541e96395207f17d34127b44d6f196623ab79aea2bc08a70ab42e79a7331a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tempe8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155d89e78ee0d1b31be347084d212170b5c629e72b2292efb4cb0b7486e31f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...