MAL-2025-181532 Malicious code in roti25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e004bec3697c692426ed9941337c35c46e9bc8ed698b1657dfeea5d9c1f71c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181269 Malicious code in @akunsansan0/jorelat20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5cf221e5ab404a79313777e94c9b077307e2be0a62e793e86fe2ab35c9703d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181214 Malicious code in @akunsansan0/biru28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df98b58b8f64bb0638149c243cf6aeaa9dd02d0223b47c57413cddb8dafad08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181571 Malicious code in tea_nextgun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9eedf549ada774251bd03c4110a8a65bc32f93879b3bc1aafcddbaabf28b242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b689d4e586d61d35dcd8f4f8684e827e488d05ccb72fe2460ef0a12b256a3d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c927750171ab337195252f783bbb0ed8d5d563fb527f8b53eec96fd6d8eb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df98b58b8f64bb0638149c243cf6aeaa9dd02d0223b47c57413cddb8dafad08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3425ccfd2c31fde8bc566b60ed4d9dbe306795f6e40272ade87ba9ad2aa0171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9600523062371b9df88051f35c1ddab8f89b1147b1b7728e0bb890314157311f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b369b4b9f7c7abc31be7f052c223858f2718a7f915f9cff526a96a0d5bb41451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47d4643d93ae8611577833852cdda5ec42f1496835a2634611bd597cecaf99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9276cc752fdb6f6965db6822461c66a191f307e552f6334917561331b6ecdb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85d16f483079e6e5829226e795ee85efc7632b615268c487b431d3adcf6f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fda9be59d767a6d0be4efce2f0bb291f9a72fbe2e5782e0bb800b69bfe37d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a26f0b320fd3ed877e7d1fb7cded89b6249f8c634e942e361f92fcbd023b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ccd8e21e64f04ef0fb7a4cb56757c60065fc6b20f77e1df834184b08ab4c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81266ab4bf47d3bc4b54d5e849d34173f63c7a8d07c25914d86726d32673893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec6289591b9f9db77e602e5009eb5ad981a210ef4c80ee8ff48a39aa2693428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba26c58d7fdd0a6b0668a3f02b7fa37e0134e7e9395494570b5720e7a3e3ac72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @oppo25/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2097d58be0f73c8139d540b29fca26139080e77af2bfabc0b2cd745beb0d7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...