MAL-2025-159429 Malicious code in manadsi-sfadia-maad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e147254c0f91f5a75b7f785868bbf119540965438c955b13989e22dcbe5b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154078 Malicious code in cinta-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ddc12f36c4fbd9827d484bfdf92b510a2e05abf5e8f7dfae571e636d4a9f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165787 Malicious code in sau-nakiio-ups012uszgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89db817f180096e226980a6d375a20a8572b0585a7c889bd61f3fea705e4013d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/denba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc357fecea85ed38951b7aa076b95aa699dc55bd6e4c57cf5e13a743e8a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b85d2f4c456a7aef6f8e5bc12be11d224f68f231b8c3cda175cbba4bfa6329c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27c6ecaa48eedd9b58dc980e1bf2014dcaaa7d217bbb2c88757ab155bbf9cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scavior-d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009d2e521d39066eb508b466f6d05a1f6ad5574d66e0065ecb92554e4979b822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecafe47b5a373885b23cde10d517778a0de3f74ace5b8d76f919147d8ac3d522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618650488eb55ee940f7cf0fe2478240c4105342a1f30316e4e5cf3f2186679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ef5d84e7bed390c5101a890e0769575066abbd0fc1b3cc594f70b89c6f9993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoiki-nsnbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27745c20f4a043184c3cefda246f16be188c6a35be52ea9b0ba7b29204ecd9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9021f35aad025fc0d0e2c65028509cb30288320bd5f2267cca6722f8117c62f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9279a1d45d16bbf6ba56437a0c778fc342a72a2f067d0db993a3c1d490a7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65927148e1a124702728d53a4daed2b068866cfcd9bea1ec455afc58310c593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b4ae05091494fabe10ed90c2e55898a8db8dd23b1ea4daf20f15f4d804e64ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nacho-bunian-jun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5744f80ede6d558213cd1d06694103f5476a708324e3f8f3dc77c7558fc58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746db44446b929b8d50b82eb2193f6dabdedb500aec891a0a3eef4f19c8236a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-vi-teajaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6a048950b9b75e73d98d658b5e758e1a7cc2a97af53cff73da01e531fe961c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6d50ff37375b2aa80fff5006c99ad0efe8a24e941b7835702effd3fd2c8dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078806c40886e3a5d49c491a55634d9f2c97993ab521b066006415dedcfc433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...