MAL-2025-169940 Malicious code in uinsu-lost-dinabusab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd2789aa4ad99b74c9b51994010946b16173d99bc9ca76c09824db408e3d4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160590 Malicious code in modirai-fia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e4eca37f82939af0c7c1a14a34164e71042a431da0277bcfe8e4f2abc7fc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155159 Malicious code in fitra-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6d9348e36fe37ae57e1d375ad036a519b6f555ba8cd9902fe7645042044b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153641 Malicious code in azhar-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e19e9ef3834858b66d6b3bd17ce8e06b52ab8dbe34975357b84ce427bac40b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159566 Malicious code in manapf-manta-nutria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b57038d0599e7fd2dc2624fadcaa0d1d6f66d0b3ea1b2138f9953ef79d7ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153794 Malicious code in bintang-tea44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557c10ae595e7679943799aea7b48b3a55248c02be7a13ed3bb885a26c4d9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153630 Malicious code in azhar-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3100e1296412269d54d562d8ff99842f1b33056004d4b6c1131d69845e07c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160468 Malicious code in miracle-dibok-ikalaliku1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b19cbd1b238df1bdeba20908f4b884582d3c8c9079d33d5b76cb592cf2d6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155093 Malicious code in finish-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a06558798bb549a1148be9f31b651cb0bd06d906aadc8f191995aae6cb2dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157694 Malicious code in kuinsnu-lki-kaopumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb00e0da870d9c4a59105cbd8d5c21ccd8481b45a1d37a24176e93279c7060ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155724 Malicious code in hariyono-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9692c347a20dc0edbe46b8c7057bc8718df8ec434125c806bee6ffd0e968fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157550 Malicious code in kentung-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016e62cdd627d158ec0cbb1e004f41982c15e9e2993e06678ce8ab50b44f7d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubizfzlio-igugfsdsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe4322d941fe2b2ddc929cd42654fdf1bb8e808054737059de8ca7fbdd74a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifiagne-asiaifhafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34099b2b7e897a7f3ba2c5b52e0e5f3b4d0141d54dbdec47a74d444dcfc425af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubilio-igusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb06cfb6697399ed887f7d50302fe4ef23786d964e116254bfb70a2e452a383a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0882086a89e1ff6987fc1622a860e0bbfc15eeb0e183bd90fac7a9cd6f3da216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70532487070f2a0deee8b4bbc1c74cc67b053870890a96f56fc6f6daf60b7e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiua-moban-atayuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0769230345a65ea6ff28ee82876d34c658f26e95f59b02d25bbe411d308acc09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149937 Malicious code in @mipta1/asar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a689e25b619c5dad2a961013b60bff4c8265264443ab637a1ece4269457724ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...