MAL-2025-181564 Malicious code in roti8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397433651a4d67fbf97914e8bc0f1ff3361cb979802e01f6e0297b28959af1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4128fe65a86c17e9a50031e9adc24781bc92e7a7819239def764921b2fb2cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee85808e8eb865fcefcf83491e1350b67b3aaceca3e162c16242b5da0d85efc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5642261f8b84154238cc451b946ce79add87333d3e2bfd98727d9dfca693980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb6d54224554ffbb5bbd360c1dfe3b6b3dfbd3f85150047bb65d8679eee6eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac56a9f36f3f95ba774129c441af79348a900781eac85d20f680cb3ad8e58b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf2a8352771e356137fe25b3597e8d9f38510e06379a2ad5697a79ef84e5ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e5e93d29eddc21366fdb7fb7190c4cd298a49c63146554ea1aab064ee4b1fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af0f72010a0a237fab8e29284f0ace502532814af2f000ccc263876c0a6e9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guntur1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6408b494f9a1b8a3a52e65e32270dc1edfd25740fa3bfedac11b4e6e61b84ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1805782035bdd62ee12b593fb115a799f72a61fe2b234bcb98ec64883a430f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2649424bfb044d8386f79e587c5bd59388abe908e4aaff01044bfba9efbf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b2fe61149882e9b2742be60f115634d6ae7fcf17bf26f5e8bd634bafc06b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/jorelat13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb9d30d647cfc34a706e731873063c7c08739b35671169b6ad515b0412d8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5dd3fe9ef8534c464189d942b0740a40c2a752bf2ccf86ad2a8f887c5e2935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc478ab8f5c6c75f6c832b875c8093f73ec2ecbdade80a11f69951dcd09b310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a89bb9f64248f16b8da630c9dbbd2dd15ddcc3cddd96ec4fdbb4fc0c4045bd18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1e1b160400efbfcb53bf16b9e4695a84845cb17097a0eec9fe33d19febfe94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6ac633cff1fd7296646ca5c16332fc4a578d5ebfd532d358cb23b2e7fe558e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6598c07d18c0c3e9191f166ed60502c26a74d26647341199e37d8e1b55ddc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...