Malicious code in nasution-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4cfc453c1d03450a3f9c9b4a8ac265a0c749330c182478dd2166a33c7f85d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4eb41bd72b9ff08b6dccf70de3e9b632b3ffbf1ee88ac80e101ede73499649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee647580054ad0b0d0c593ef884b2773cfce1f78407f7f50a5f154305dd1c923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14660dc6c92af2dfdc613449100a77e989ef02d0b8298116a0dc672b0c75375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf16dd72da2f5f664f006e4fb0241a3b8f30dd5fa82256f5b425a4a4f77f44fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/xd2hdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c16f873b49f5e97109c9965c526710098faf50a1c82f0ae095cbfeab7ea5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-da-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85784851a9440b9445b446a5b96dffc747c38bbf70b5a5648e7e5f2a246f0c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-ukasiamisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a152e718e71c625b11f614e321ab16f25838e411ecfa4ee5cd7b661c81fa84fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/bmvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c433ac063e1666e5895fb3bc68914c8d51877f24e48fbbac19387987e82667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-pedadaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1490269c6db451bb05bed8428969e5a8a7b4ee1beb00a014e55f78ec50b45a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-ls-dings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5c7e804679fe536bc0870a62498f56fcb7decea32695661a5f6bcbba7dd820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1377d8f6762143e5ed880c1391d6a908ff01f5604d0e4f4af4bb1ad38e0f6174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3c207a427bb98d36a2d424248c171cbf74621773fcf0e014a7bd89543e7af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f436d5b455d703863d79481398e015ba6d0e66a6e3f6c4e9393e2fc69d1d63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-ndutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1210fc15d3d604f9a00933d8f1868390a0fe9d47cfefdecd49da8e5a0b103f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ba0175a5defb8485f4f0ad83e718b0c1e15fc6ec44f162720cf778eb2eded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6b5a6946e656af345999f9a66b267e2d816c33cff20cbc9c5f108ae0ce78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbfa9ac4581272a0864274ec8b58843feb856831106211f2159a15ec80f7d77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157863 Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...