MAL-2025-164781 Malicious code in rinto-poke126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05caeb726c4f1dbddfb36b40eec812ad7a9ed73b33a1362be151185c227ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156916 Malicious code in irassdhi-sds-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fd8c89de40f4e15e8b5dca7451042c176b6cef1bc99f61d002a5911f63262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbe50f677409572b8fc314440d7a46dfe4c9a521521997e8038b624aaed1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5938f6165a44455470b2f0b3e287fe2935c73474afb1de277447c8b7674de7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d4b3251e6f7155f5b943fa8c924473ada2e1011b8315f247c8e2830f959c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8dc8d6b589ad60b2489859ebaa21a4f7c7b4f814d2c491fc040b10eb5cf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderan-udilasuisak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad4c76e095d71704cb7c54cd4340f4dda288c44097655a81a06b1cf65ed6c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68271b24261b6ab08ee3716d78b0fcf30a51b2461a57a4d4537707d23e85abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rassasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1987150a291682ae767d99cd08fbb98adf49e5b0bfc408e8093cd99be9e68682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/resadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3ba2b3ebb7055ec16592d0c86b149db64be19799be95256c450b2c0391d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7757ae5f54f1702892f324f0e8c4d6b2d7c1f47330d9a3f96a2d17c9c792ef9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16a5303eac2f0b6d9a077efae7c1a48ec60b3cd50dc5735d052ee7fc3ac4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f596e825a9d8a7ea39890b3098f2f4a06710056d572d6b60a39b518536372d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-radiant1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79bcb0b23bf3adbac9a67667f890826292dfb56abb1f4fe1df12ba2cfc5daab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433e94799b1c6b5dbdba37dd75ab9cf202fa6b10b2d29e34485df876ecd36962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc35e0685718a9c9bf563babd07819a0f2380037e21812480f4357f080aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15570af979bf2047ea4c5d58abd602d1d9ceac5ef00eb68992643fd5db9a403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-taovilanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e8b0baf6ee34742d7966fab79c06880b371896e67a06e22a11dfbda9c49a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...