MAL-2025-171220 Malicious code in fikrisatria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab503b04ac7b66afa34741e8f33cf9763230d44fc76e20da5cf10633adf83d42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170766 Malicious code in akifjamal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682432777e2876bbf59c496cdfc682abb4ae669760433f109a1f4649f2b5220f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3588f48e7cd8e66bbd45cfa2ec0e545ead0b1b0dbd13af060432c5f9309cdc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36f97c09365306db2571e6c4cddf15af60b4a41cb4a6f378d9d696a19776461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-arifaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d94c2d8acda63743beaba1f6a0b441fb146f663a9659d1e5f285866590bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154939 Malicious code in fadila-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e769815889f68c618f6a24f91ec402b2447fa0ef3ae86522b4d7c8142c633a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169062 Malicious code in tehah-nuyadtasfag-amanstan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b46efe06c8f7e9e4f9b82e76237b13664efdd8a5e555473812065b65e82a2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162806 Malicious code in nokire-lokcek50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed0855f2722ecd8c853e58d1b89615e4e3700c15bbb6d5aeca8f030ce61d755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164885 Malicious code in rita-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c5be0d08d094c9c6ff4a544c74bdef4b9fe792fa0b541d0508612b5694c456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165966 Malicious code in siregar-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2113588e935a945ac0d0a5b278c0b6c1071138f37d3514864547ff9e3693d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150459 Malicious code in @mipta19/wbosv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9787e53e58f984763e476762f5f3faf5df0cfcbe31861d3b3b84874a8575d03a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347b7dcb8b0355c43d162b7ae995e379d8bbbe68bf7aee4d698b58e8928fbf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoiki-nsntabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74b785d009aa4cf823961bc128220d3002116f886a671af029b234ac94ad1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-afifsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b105fa9ef42b2525df8d857fc4fe626546a9c85534a865c1a5f6234303703f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59075b18888b28ec66b0f54e48d86e7d8dc786ff03be8524ffb1da70723adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b36ed009609d2d36b1fea761fbee071769c53aa85b361336323b779c5237ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuratrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70eb6a3fff04f5df391bb447f76aa40674708c65ac58686c1bf1bb86579c879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-mudifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c586162e63b3b4ba5601fc9eb7622645bfd0f5ec3150866f3158269d26a0ea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ertacssau-tery-munche (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4031c3875337531f4b22e4a261167c7c314825437486d11b4292b09eeff46829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150180 Malicious code in @mipta1/qwaea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a472d8fb6f5eb898c9b8fd53881f4abb3353b26674068baefda58617ec2a1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...