MAL-2025-170606 Malicious code in @fahmisugeng13/tea_fahmisugeng13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a83359a76b91ee8b6d54c2934b627a79fd9176472dc253d43064e8e43d23cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172018 Malicious code in yasirazeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ac96b4ae167bd934f52944cc5560df29b6a49341e9b9d5c200021d0c24b185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170825 Malicious code in ameliamurray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 619b2b72b49e0350ea847ab294e7f5a5198d3697f7c70e1b510e1f725ff134ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muniape-nuiol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 867ef719061ffa5987094c2e7a1b52e4c60a8a98bf81f4ce68e11792d6ea39b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioluan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a648ab236d688fec627a39ddd6418c9bb1e4bab975bc558c5466d80f460524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534f8dd40b41c73f87d2911a1cd0ff642b5f022b53e78983d346674aeceb489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d26a52cc1580d0f1a0596b713ed063f930db0757a7aa2c0a01aa10cacc3465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7c9f126ec31148e6e560f3667ffe2463d52e0a1250109a5e90481e8a0364d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee8cabe59e41ac15b1f7bc37e037d1aa6814f1449a7ac4dcad87662ed817502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054bd9df9279e8ed5f7dbd07dcf00954990a590fc9ba712ef22949f4884f2425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fa8d2568d9910a4069cb47e6796586513da25bb5bd84e6ab411256f5bd2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fia-jastyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a433dca6d4c796329816b4088b30b2a3089378839777e93a6a311da643ba9d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiragne-asfafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9074ee76df2f7cbbf3fad0fae6858939b29c227efe1a9e9f86c209f7673b877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51aea3a2de31dd035b1b361e1e81cf0e1fd37701820c9d85e94b444fd5431e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-aluni-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea438574b260f2af248b4cadc118d19e8938142ff1ab15a6e2796d148813aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaiggfakaa5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedf65b0cc5d0ea11e044a61c832e2c0aba4d505b5325b361d43c6ae34174416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd7c756ddb845aaa5571e7dfb95673157f3ee3e04a84025306d6bb54f5276a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4135b33f804948024972fc91c8cf8e691b44defab54d5168d8b829025ef07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 152313de9cc4922b737c1957c982f69d94647222dcaef51128b791e9572be12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...