MAL-2025-173450 Malicious code in buta-fipofa-ihauh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71691b3ca72be52df08d3f097a1836ac9d6a82386da044f3ecbe01d9e31f22e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kia-jakaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556183d340bc260eb89c2540197dbda9dfbd40f6b7e5b79cf8761de33c6aa9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173887 Malicious code in diva-bani-imbabmo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec96d4074ea48087063ccd0f331ade85151ed5b387889ffced99249d47b58bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174575 Malicious code in haritono-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1c40fa2eb37931cff63cd1b7892ea1a6ea943eb38575939b6cd59cf530ee9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-da-raatao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c64de3e02013143a974393162b86c070004a7aec91eab21690b199e343b7b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aapa-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9815f3ca5bedabbd5de24e373ac986b5e70af52d9c4811500c48282ff2a425d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abdi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b2ef1f436d1b9d9fb9bd4903e90af76c8cc31d5c3d1d446d549e4307118d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b8f1a304538542acf706cf5342ac7a604001ffae78a2a67474c4df1ee970d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4812eb0c44d4314d8a4ff0a2919e06864a630872280cc084e6362638d021853d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ab5e7d9a954a44c0631332d06605ac55f67cc8a3c4aea26150834f48b592b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a949e936101973237e88fa075705c3421f852baff96b6c33e1823414404326c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ab45489eef1ae72fe75f69b6c13e346f7c55dd4dfcf5b17b2a072f1bcd35ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ananda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a409b0910ae4cc8f0b9a04387e391a7b7a8e3f4dfe9df43188ee92c7233d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hauli-mul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957d63d9d916beb40c91a3d9c419f1e80cb82ab563a4d520d55f905a6a276225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidata-hd-mafdidsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef7118b38c8c3a55564fc1c4a30fc71b62428622f6e96bba15d7d6ed6c1b200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anidta-hali-midadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ec56fcb4ecf7f9d536af6a00e458218c82b8680d6cda54a5c399bbb4b4e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anita-manahudda-mag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af89bf2b2df254e8459e6d979169ba16e9d6f822e4de90bf08c108d1826f0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anuuuh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62392b85bc469cf8518995a58f17dcc724a0131516118e6415a7ccd00853050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awaaaa-lia-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b7cf2abb635cf863a6c49bfe0fe688b53d721a6ff8621c8d9ff4b8473ad59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapagfiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1fc7d14439ce4f929a7fe1686023804e821fb7fedeb5266ce51904fb1bd4b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...