MAL-2025-156821 Malicious code in iqbal-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07dc6c3d079ae3846a29bcd72bd2db7d89bd86492b797e2dc843afe90f15d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153738 Malicious code in billa-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27545c6a6fc3b96562e884e665bc94d2f6faf3c1b4791598a633bbfbe704a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154564 Malicious code in dian-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a5f1d9701110388d119c3e6c8818817715ee48786c58b3cadd68917fb10484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155386 Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155638 Malicious code in hafiz-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa2b4c012e616ef6fda720aa266b963340bcc9120e65dfdac75ca6583f2184d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyua-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff26e75d419057b4dc88d54a98a0f38acd88674348e045c41ec2b002c45ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e301d111e5f3df6e8fc1f3c994cbf301b0c13ad59e53ac3356c91f7766c1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169375 Malicious code in tusaaya-0asds1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942fe5779020c6b9fb9a33307009fde4576a6fe4eeee608441b8fed0bd285ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156707 Malicious code in inufgi-gotumafa-anfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67d0c604ce2c7beaf53d1d9b333e74014d3fbf21da013058653d7d43ce8b25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160342 Malicious code in messi-tedda-reua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dbfa6093b9b32d7eab855fda96ed9c4b8d0bca6801fbcf21680e3950e0a44e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160720 Malicious code in modirai-igono-jiomgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de66b62b01ecc84e4c299a3c5026b7f859ea8eab7b5f329229657521ce7a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofisuogafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79f58a5de1943c02ab3b84f06a436b10859ac8f592c8f5130772f10225b4541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/husada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b109c651e524c5b105d85798f362d052e5604037f9a592ede2beba8f979fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ef2fda2b44d1c6484383d40ebf90a36bf011e4843d1c752f9006e9a9eadf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alnbio-tolimasyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4152e464a3482db35baee44976ae892479300fdaaddd8f2369a71936df3939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...