MAL-2025-169122 Malicious code in tobrut-hentai-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33802908c2a6d4ea1409665ab1162beb505eb2682f60cd4af71d9c043078015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162333 Malicious code in nokire-arhani22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c996dc4b75532b5663087c3b5102151c5542c6d6464b609f67f5ce2a541e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161965 Malicious code in nasrul-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6301bd867dea557c16ac293dcb185c6bd1124d026ce7852072166103c7063e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162980 Malicious code in nokire-nakala28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7a8672c0a4641031a9e594362925c3aabbdeaada9e10a070a810af1945456e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d516c299fa01c19c37df0ec79057567daeb2058785a7f51be65ac440c707b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676c04d8ebb55cd7e512aae6cebec00a2a216a45a74b14b394401af2ea02d092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423fdafd993c40c2aa9cf8358101a39854185d78c84ece96450d29cdbaddd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fodmafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be760e21720f01a36b5e12f89c86c5c7ffde31c48e45ef76766ed9f38b253f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumafe-naguu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02eeb25f96397057e7dda63627ba83c29117d79d5c1d6d2e81b0dced1219ec42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012giek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8605bf27e9688b7f0975afabecaeab89281644b427fd1435fa2aca313e9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17306ec72dbb94b40b5da4154850769dbfdc2401e590e1b65ebd4f95c0577a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tadfaa-ta12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136e22c53e142bebfc478a8b9c41e1e6e62b9630eb02de9d035e5c8f4c168c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476f93f13a822c03b0f885d2864cb68dca592a7799c4bcfd5174edb2c87ab836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58af83165704989622a117559aef42a03f186273293278b2e3fd9348115178fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tsegr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05269250a31646327ad8768811775cbfd28c8a79d9e0a0a79359623a4a9eef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minus-buipenaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9f2d9a407056cb8d5445b80f532fd6032ab37ca5864dcff363798d1b887bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maonldzodafuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb6e52e55d2195f6c72ce9cf37d42a295f618c51d2f082be37a292751df6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c00b6fab8ffd51dcad76c1833935c77ec76e123bf1dfe42c4be83841549cce56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...