MAL-2025-154100 Malicious code in cinta-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7790ed6d2aecb1fb7abcd89bb5c4d8511ccd72f3e7a89e7e55d6f6086edc482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162036 Malicious code in nasution-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2729d3d97b52ab6dd60586af93daaa003eb650def87b6dde1dd086db96d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165174 Malicious code in riyanto-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb46f875e0f3fbdf02f13b23bfed1a8b8e24f10ca0260a98115fa0c9a70391d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168374 Malicious code in tealove-naiman35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa342a38403f6cbd3ad00dc31b262e929a31760485a16e2918cefd1c540f8bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149925 Malicious code in @mipta1/amsdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ed5dbc80f398405a32d2d758792a3ff45623bdaddbdfa98fec310b843d7fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a7f1315af53d8b41b48cc7419c820521c2ab8aa432689d30daa43f1386ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568eac0cb95859e825848c74f6d3ee8f5882dc36e6c411896198b28e975c28cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6cf9827cc66b1bd2c91032188b25c06f00ba967272d7661a43a7dc3edbdfe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir131 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6451cf979834e9ae00cb79cdf882f6f730b3431b7475ef37a18c53fc1f811f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-misuaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9589fcbbb35c4daf297fa0cd5f03e7224518aa471cfd02030fbf220ae8a08f83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albio-tolimsyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65085862fc3b30ad042a6769cf804a263513bae5092620b5bbfbce1cc844e294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3d7fbb144b3edc3f95c62112e04797e87323921e620c12419e102404f3f29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a3b510918a65d227f3a19e8162e4a6f45452e2c02635e17e387c3a4a96de3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01027fe10b1392b8872defde3427be43b372a49f1c4aa05f87e53023f9f7d53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bf2e8ca6672ac9d33e0348d3b770631ec5c7c3e624bca461a2dd74c9aab18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8f56ce64da2d35a5e2342a0a05952b810474c67bcb689367e978db7e970815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c011a73a98537f8eb92762f524407d905a2d01ad136ea4ac013ca0097452babc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e1c0d577ecc2b66dcd04bfd3690a9296f6bc7237c84c4c5d5fbc88f49586d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b1817122b987bbc1dc11a30c3e611b4a1a1e7c5a4e26f98d59bff713e96e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b69ac9385c207abf88b41cd737a93931395086a4074587717746cc5c22bc42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...