MAL-2025-170694 Malicious code in ahmarameen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe81767b694bb197d294f5b0bf660843ee33c1f864702df53506be4327a9143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170983 Malicious code in bilalnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f0d7f6f305a7296cefcb60d7855ace4a3e9899b8bebcb3180f06d939954c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171465 Malicious code in kopling-sentrifugal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a3981a73c0bb93608584a940ed860afd00f3f6a981aedea3bc03deeefa8cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171649 Malicious code in nevestx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c072f68d168926394e98250ac9283316307a4e22f3deab024ee6494783529cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170606 Malicious code in @fahmisugeng13/tea_fahmisugeng13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a83359a76b91ee8b6d54c2934b627a79fd9176472dc253d43064e8e43d23cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171505 Malicious code in liasurmanidze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c180a9709ff8cffb86fab49da78301d4f20acdca1fbcb89972ee7626f16524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171139 Malicious code in elisaputri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ad0bc84ac93e532889750bf51b044544a712d552424487b34f3473deab8c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171172 Malicious code in ethanboliviaandersonrown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09de09f63765cb0d359534c58d14967b0bed10d911394957df76d6407a2013c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d4dd21c0c5ea1cbf2964384ba8a0f615f7a93432852dac79e2c6b3b689c529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e05da7515e648d113c624569277cd1bc98f3cabbbfbb0a8b87855bd06318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f49a2159ec9ed38a8dcc024f23b4ead5cc8734dcd6a3754d90e1714fa805e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioluan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a648ab236d688fec627a39ddd6418c9bb1e4bab975bc558c5466d80f460524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee8cabe59e41ac15b1f7bc37e037d1aa6814f1449a7ac4dcad87662ed817502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9224c8177cac4e12e6b559806ff6eb760f8807ae471a6a82274b545c63014112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12paf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eafd807478cfa125d0df066b9f2c239a1fdd4bea11de8a208b19bbaed9ebe31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf226dfcb912fd7a1433d4de0e002f7bac98666517f3fe48c51efe0e63ea7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536a173445fd98506f68d5b43597e336a8b7177d3a724e511a6218153fad687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b39f87afe1a759d3246ca7c714420474fdd3fe9740678625b1e9363b842240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fab0462695ab6adda6a02a591e83420c06e6e9418d2ec3c149d771805e884ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...