MAL-2025-181248 Malicious code in @akunsansan0/biru59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee85808e8eb865fcefcf83491e1350b67b3aaceca3e162c16242b5da0d85efc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautg-infaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f641d7ee4fa83adc866a511271b4db4f2055976aad53cefaa83396be4dcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadod-mipta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e61cd5496b9529bc2667a2ad98bdafe60f9c208009b4d0a04b1cd2949178b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bbc4414210d7eb7cbcb28a1f73d61db546f2534cb5fbddc5adb2957e6f02bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuni-niia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6df9f5f9ccc1b47dbc595ddfb30b9f030e8908c5ccfb3dc7ed2306b8a334e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-backend-event-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb93c2961a0e31e61d9eb6bc66998990f5f61a176e8605fa5d1de03381cae1cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0603b77172d84a89b6b4882a889a3fe2d2185aa091aad90cb2d494ab42d9d27e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e8373fbebc9ea669ea86731c2ebd8bba954c5eb7c52634c51ae72a6e67bac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49831 Malicious code in bambang-nasipecel1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990c7dc21e2b3402ef7cbda5e1c5aca5cadb8ced9474779e97e0e90b28d1bf9d The package bambang-nasipecel1-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...