MAL-2025-160792 Malicious code in muklis-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1ecedf422dfb8cc52a22cc7849ba28261887fa1bc68fc4b0ed60c5ebc8461c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153058 Malicious code in avminah-fagiaas-figafomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dee32ab66895715af169c0c15bedfe2b110e87d5a26663eef687a8522060e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935c9e4e014ee861b4881bbd15ed8b446122bd17e972497e9899f97630519750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-lisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a03010579f7701606e5649ea2c9410e03764f39ce5ae787fb6f96a0db7681b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f258691d198ba9af4389b6430d08206f07442236cfcecf6a9ef4249fc4d8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbdcd20d4a5118e3a20196d51fd8468be14fc4e0f4fe5d79ce3775f92d8d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8779776dfd7e86989a08eabfed8fc334606a422ddc419b565815244f29f19235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6d08e6eff2d693e7aebc7dc3ec118586cc22ef3fe1defb99ba16e79755cdb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-kaialbu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b9ecaac52e51ef42be761ab8f39c558ffdb60d68ea452c485319e9c14d1a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-kyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f605b639052e75ef5465102460b4235c650f2c7581305d141f63b668e8b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir148 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f3a95f960da234f9a36c7fb1ec7344858bc6ceae82ab5e9700f7ce64c68dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/nitroteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4da8b74def3fd2fbd057f82de8d519ab812495c31709643acb99fa4db6e617a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313dc870bbcc127da90f60c40c356d8b6328e80fde07d2c421b6a78303f8e501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b299d70ebc002cda4da0e84f5b265c63bad0f702d16c10abfa3d50c6cd4877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tyt-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a01a37d3b6098de2b62d785672f86d51548a86fa2e94981fa4b6b1a06c745c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabu-nali-iya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb02998b61acb34ba0a5923b73e12ef50a5465383f5608fd6e3d1fce17e3eb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-mansad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5926d5f75b802d47387012c7226e904d08f2d03428292857024094e1958525b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3617d5f77ab5859c127c8888644e00570c745ff513f39368b98d55bd68dda81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sif-fagada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a09b1a10223f7105bc99eb8d82fca9e28afbc8b193c462f44512899ea457175f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasablui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a4317f8280e6bad0976ab62a2ec92eaaa596b8ee585cc8cba313a976c1eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...