MAL-2025-165095 Malicious code in riyanto-111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 306d0a7d93e9ea53c8053bd4a908fb16954101691a80f635b7cfc233d2a03fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156127 Malicious code in ilal-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58be208f135d682c927c7cd2d89451cdbb85f785c24431fc7093ad5815067d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165174 Malicious code in riyanto-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb46f875e0f3fbdf02f13b23bfed1a8b8e24f10ca0260a98115fa0c9a70391d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160885 Malicious code in munir-butya-sdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943b6d40506e148c1ee725cdd140a5a69e37f528dd5bbf6546dd2ed09242c079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156334 Malicious code in inagi-vuma-nuagiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0f14f8c67ce5fd55b598f4193529412c896939c268144c86a5a4561c9e8a1f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149925 Malicious code in @mipta1/amsdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ed5dbc80f398405a32d2d758792a3ff45623bdaddbdfa98fec310b843d7fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151734 Malicious code in aciyua-idugaat-dafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203274cebf05eb8fb29fff03ef5d89fb77c569df2dfcdde01ae342d2895410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a636c83de2325dfcb1ee816026248079c9d59c2038c3b8dc87ab3f38b6da18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd34fd2d7a63a65528978cbd3f3860db467302a0359b38267908c3a2cc8a0fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afaoti-urufuaayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcdee7ac5ec6b847963a46cda505b66cf821d2f3e781e6c9429aa3365306c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-adst-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4243bfd356451ca205a5d3c991e159e2f091c58f66e18795b643347275ac927f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762bff834c3adbb70f07ef6ed2bc47bb4eb746ffe8108c3875f592c5e56c5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7375c35e50ea053b7b2b8fa3aca6ddddfdb65e55f3d24173a88e23cd439ad3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162036 Malicious code in nasution-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2729d3d97b52ab6dd60586af93daaa003eb650def87b6dde1dd086db96d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151945 Malicious code in aibopna-mobile-arifaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d94c2d8acda63743beaba1f6a0b441fb146f663a9659d1e5f285866590bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160713 Malicious code in modirai-igono-jimafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a74f8a828114439eed682db5964cb55f4f185418efe6f8db3374c669c5a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161288 Malicious code in nabila-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4c335bc72d92a402ec0c83087842610a98142c892258ebcabeec58bb68e57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166026 Malicious code in slamet-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3429c86f0daff819b6b9f2608236a59a5eefc8b12eb74aa7ab23259259e6ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166550 Malicious code in syahlan-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d228690ed19b99e83973d6da101247c44f5acef69b990889f143301368b3f15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158822 Malicious code in lookingan-namalaka13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a516812a9f3edce934f687be64f694c9c8700b2df574407504fd7193861166a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...