MAL-2025-165125 Malicious code in riyanto-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f8832cf666db60d0d581b3048069007c3fb3e9ac348e58dccab7dc5420067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157780 Malicious code in kuinsu-lukoi-natibabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca3bc19cc13e93a2b567389feeea56921bb08db1dd37dfc96ffeb5f0db9d990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153474 Malicious code in avomainah-fagais-oguyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdbdb6b4a4637f4ce524b867630d868b6d57765175465dc01c1cbfc8d698668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160495 Malicious code in miracle-diook-ikukunma1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f62e39aeae04211229673eb52a053449c82fda156cc6d34882edd187ad52bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158565 Malicious code in lookingan-namakiki53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733858fe9406bcf43126c5eb872456b9a95152184300be9de4ead29d09c8341c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3f543200123d69ec4385c195dd7a0bffc8aabbc0a98e3f1f62e07201e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604020f11d7571d2e1b646d40e45335b07edb3a96d43cd94e423be55702b9d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a94c5e2a250c2fa9e1a9dae02e134da4ebab42dca389acea190b9db0a68385f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31cc0a07ab7e010bddbb4a38be21b46d342615154ee4e6089d919ccb49a44cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0b64092ef07e7dcacd6634a3ec5a25fa2ae6e6d688173b1e746a86991c98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaina-aikki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902f348c1daffe74021ad4a7dba97337c2a09f268a7d3e5cae95a531ba626267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragis-ogudufafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806cdd1ce0bc1f083779730a778e92730d797ce2d691650a2f9f92e41e2f9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d71ff63b8cd1b4a4df2e71b009096033e3d819d1d3d1e181cb33fde70a8253 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sanctum-re-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a9d2fe261d797e1974c58d99d8b9675b0a106e6d81959da8333ebaf192532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-nurr-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164190c7af8642f970fffe0ffe4d5fb226d13c2d1ddd4caa22dbf5c6e2548d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b36ed009609d2d36b1fea761fbee071769c53aa85b361336323b779c5237ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-tun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdbd28c086638b2a48a5220dbcc9aa8eb4e4aa77dd84d7af9feb53615f15bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-adt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f06bdbee6f2bac353394061194b9a4c3fff6dbdd3f688b8327be27b463cdb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asfaasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2732acb236938277d4e9c8971820ec9cadaa40df7d6c771ef3db00efe6f0d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8230e0ed2c2f172b34c34c542b11d586750828d8a59e71887e5d7432656857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...