MAL-2025-183119 Malicious code in item-ati-zpooa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360eaadda1b61de0dd0e6c8caae55d3d95135f88c5e4095a0fca2f93985ba43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac68f62b0d43851a51ab10e1d68ad0571283ee0782636fb5aeaad88964e64d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974b9e8928986dc32bc6dc8fbfa38ebfb1819eac3ce87d7ab231c94b36e8265a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89034659946802084d8b489977bc1945a2af6e8b0a321cbcd17dabc1c39da311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281e10e520a5288eea662e1af8fca9f94c798d896ea49a2b975eed926f245930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aa45c4180397f5e65399ef84219dae3187eba327a72f64300987a591a280ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b688f91ab5fc8b7e22acf04af3867d5f53b468cdebdc0b93db0b5da1cdd748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e385d73b6c01ae69d53ac0a9413f0b23e679bce83c8279358282eb92e064e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88f9f6ae790f692971eb095f3225b17fe20285be72e10394c675d365f8fbfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/pucuk5000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e11828162e3702541681140e4d3d91672280d30e421fd9d88ba9fb89ec6928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130e37729f33f28bf37642d1c28d8ff81f04be6ba2c41f5a3f34a47f7316c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca29d8b9f21bafffbf12e2acac9a58caec1495d1f3c058864bb8e24b9b09abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/batu18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c68778974ba13f18457f8cbd7b7822a897afd6a54f68f70913b56df45080d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d490935b719644dbece621cb890d9d7d6d9efe53e810824fe4f0ddccfd087f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1edfc78e05784f50e4348e085c1fea22cf6db6a8967f21910c3605263e76cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac695ade865efc91a2719c08c940ffc18106e628964f4ac966b1b051f824d91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cewe21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34f343b0df7488b7f863719450e1e47f94e1e132f46fa1898ba3bad0307439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roti9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eadce8cdcf9587f89d13b5c29efe37321115206696aab61a14c8443a09f953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/kopi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2636deba3531ee592478b89de2d87e8a042cbb957935849b8f7b452dbb1da8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/susu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22311b399fef078c6894f01fb4e29d5923ec9ed74d5c8d473347b6a6e185779d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...