MAL-2025-166078 Malicious code in slamet-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7ade1b95a1dc5bac00e225f00f9e3e2976e8fce17178a16239cebef441c01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164562 Malicious code in puteri-mintau-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fed42755f897d7e48ecf10b1e321bfd132155c9e2335cd315ee2b1184d096d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3fd6e515f5b77da48555750c011fddc351f0538567f7c8595ef5934498c094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd81ca33434c5bff2194adc8030d8f3c094791a6fe4ed9ed246555eed73fa201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05ae6bd7f1690ad37e3d227eb05d723392e8209016301328de61957a463256c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa03be830274a58751bccf94f1d22dd89bbe9c2e8642c3944e7749c51443b90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-daana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076ec4caa6fc522143ef83b5756b2aa0c492941f9b396ff1cb05ee9be2a5ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3a99d037357f69cc58bb9d2cbec3541ea53ac082c8e1b640e4f9cab4bca744d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uufp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd134fb91f8ae30e9a2798f056fc39c7b6572284c115bf5b71faad8498fba2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2918af7783f96ef3084b10a0de12bfc8679fb9e7378e958f94fa27b47c83e35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901c2aa106f68b208e7602b4c4d8acdcc697132fb8e76dcdc1f3877f17ff8d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aizzsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff5d4d8cc006e51197c74b6aa162927de9741ceaa294d237f2fb8c57d934e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313be07f84dbff34325114d7c1b44193635f8ce7cf4a6596fff3e467fba2ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimun-abup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09de1d1edd61a2999279537facaa038aa4d956b2036b1bcc0b812f17a497aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c05a7b56d50932ea5b5626014fd11908520bd6857e1634895109a4c261a26cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dd5f585b8e286d947e458fe4b771e06b093b6a6a252a51f7796f0347d4bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc7e957d4d8cbc927aec61402af248ab9c2f83a0d5525aaa5ab8e15129f9239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...