MAL-2025-162005 Malicious code in nasution-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b71a3ddaa5741c259ae312efc7834349ffba42abc5c177376d071822855c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155351 Malicious code in grie-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058ef1b59c587537ec76c95f8580e81e211ebdd7fceef396c6f8d0b76aafc842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159510 Malicious code in manaf-asin-nadbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e37bb6ddc73155edaf4d8d481f386f37e70cfb50650ca9d666ae27d3c4896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166449 Malicious code in sunderlan-uyilud-vamuiksnauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b767bb25ca4110ea41618c8ccb0e4cfc60aadf1fadb12c7fe07f354bbe617402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151726 Malicious code in aciyua-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e53d5845f18cfb72156619ef2103f96ce8a94d1e075f3aaf97880cdf0b7261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158481 Malicious code in lookingan-nalako69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5584719c584b5346c47fdc1fbfe9d217d2b84c96f94052622c498793979714e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154344 Malicious code in diago-kalop-kalosohaaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d89577d599fa6ef79d1567c4c588a2866de2246a6d9dd6b559f9b5e839121c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153246 Malicious code in avminah-fagnimas-ofag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374459da3cc899d2481a69ea1be5e09ff1aeb93af37577d149a3844ce1ba263d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150094 Malicious code in @mipta1/kdads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b443d1d105cf78357d595396a15fd60ba52c1f17934cfc302ff1f9e582d984a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162161 Malicious code in nokire-abimanyu47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c566fc72c232e0d2ec9c28978d734014d005a678d90ed07a6081344d90ccc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-luai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7156c39f881db38f4b8bbc68635c65bd62cdc1d66b7086d511d8520cd84e5470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82edd86c24f6853c85b1184697561ba10076b67ba638115439838ae57c368c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3273026c79f9631c3639efd29aa3f83840cce12c0418518034aa924d9252d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-nugtas-nugta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfebaf1029b0cb66b0e3d5c25c5749c7bfddd45268b287e8bf849a80286d99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a86d09dd4f499da7cf0637b00d689e598429520425810fe732135c572b269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7124408079d8d0ae8a311d55a3c41a827c9423ebfefbdfa4f85cfc6e4b53602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iba-otabaumai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d06f75838aaa65619605523d432178eaaffa318ffe594f801fbc531bd6c49e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginagaf-dofajguaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a2e124f7ddd17503c3d1f53f4f04471e50bd87f832a4416616e24afa931d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gudsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397ebcc58a1b51caf4baaf8173a47fc7c5952b9dfa4a1277cd9a864132b63a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96dff02a4e59bcd14383b76136191fc74d319b3df7a8b9a67f31f3c413d574c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...