MAL-2025-172852 Malicious code in anak-jalanan-mdn42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c531a97c5afbd1953f342a47e38bc6147b49ddecc4ab3c3cef3246380ac9444a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176718 Malicious code in nuilva-baviva-munvavidzac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b090cae0753358fed2445a19ef22a5f74b0bb6fe2826972e797f08e4e408497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miftah5-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3224b2dd7f8ac7a1bf5c68b4a1bc3ab1e7e46d12b8fd39e5e14c58591a427be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f315f3c6203e88dfefa369f8ed9361f28b31751946ef61fabe537c0ed621b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a45b58d3a5594cb743ec070e9eabfa950860e930c6f1cca3b54b59e3c9ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09083ac68c8083fc63d20fdc76d23a9b6a43565c93a950e80511f30cd1638f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diva-banib-imili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801d0332aad7a525c05d1a40e6782d0a99ae234c8342df1fa8a3724b158d00f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-dadre-ahka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a39fd2cccfdb86eeafd53742cbc6f68cf1c1973d9dfb4b8100540efe905f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeba19459dfa0b9ada52fa4acabb7bd0a3268c5c3ae1a45830fb93b79118329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c245b66c9a8cecb0e2fb7b5add1a91ad13fad0d5544d014c3809ba5915611a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimuna-safiagiaf-afgucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c294da943926854d0b2279353870f995f3332712cd92cb2b36fc1aaedd37ad5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-adadar-baidyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d0a48f4434b5e0129e78cd0d456512a2121dc3a6ca2347e3538ba93c86aac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-dadfadsid-doraema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09066d3de84f75bad6fd93197808b1fc5b32fdc1d6d7e674d458243005d5004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248c05c4e2065670ab84204b8e2ffb15d0547a90eaed8938a9d5a68d30446da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaa-jokioimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9892681210432c6b1774ba629c23f4dbf124c92b034f5e0c80462a4de0cf5b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d1e48f8547714e8ff641039a028f508d9d98ca90970a178f9e4ecb91441232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodaan-ngusafa-ndgia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcad3040dcb5b58602cfb03b836d973f940af6cc286e7b677f91ec8da6b03bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-dad-rofdaadid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f737ce426f8886d111837fab3efd59f3c78908ad0de57db7ce23d6ad9bc326b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00765f7ab2724112153382b8ba4dac20c399ffba852c90d1be4f63aea50c9815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53289ba2762c97469eade866df447fee2d8175265a46155594fcf2e29bd654b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...