MAL-2025-174679 Malicious code in hitachi-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4653d759636d8d6888fe65c8c3723f19b03d9fd0c3a142f2fdc3e9a8c6a61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179055 Malicious code in thambi-freet-redt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1c5b5bfec221fa6a333831ac3e871fb67c056b48d58792c654e46b3ad72d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7954df81a2eb82dc2c5ded68d6b205ce4183428cd9798a9d7e03d44f7f9906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158366 Malicious code in lookingan-nakomi1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b9ebde0b8d3f3a39840d8c2957ae768d1dfdea38815346177a7e9678b1f26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138057 Malicious code in wibowo-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81daa594b884735a6e66e93a7619384bca1b7bba5cf87c77a25f9f14360b0bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126413 Malicious code in fajar-mendut79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960413e5e6252094fbe61bb54ed626fce2e3ae54b117c87c3e0216a3e7d8d226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109954 Malicious code in ugliest_whippet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b456ad7a924e5865dcc57addd2471e98b3a770866f1fffc4b9a4b85d80109b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tapai88-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bb0f44e80083e6f0caf1814863cc7e8dd8a7054513e51d9cbe4ba0d6c58a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72692a5cf51165c42fa00673f81063a26f6ed9dc0aceb1cba4502e22d8aed068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-enting100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d7a8a351c20b07c35e6cd8ae442b4dea7967be83ba914a37abed9615fc5313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73424 Malicious code in ida-dodol60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3bf9eba648d337a28b0b4d10bc56584d5e110f1757123abd873e8e0f2bb0c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-keripik10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8587a010984be2d17b4d775d17de9b76682eb5c63d6ee13c1c4154c9f90661e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-gado-gado83-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd081e78c01630aa95a6cf65b58db5c60e6570de0a3740c0f179b2b0fb5503c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...