MAL-2025-161416 Malicious code in nabuf-otginaaf-dofpahojau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f4322aa356290bfba4f45bdb83443bbca0cbdc421124f50cbf0974bef0466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166521 Malicious code in syahlan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14287f2ff65f940ffd2f2d6abeaa0cd207d6935dcd5fa3528bea642b7027ce96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166157 Malicious code in suharta-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e5bf06fcce6f0542eb76fa40fdbf4822009b73db0b33ceb5e3a5b05d9add37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165220 Malicious code in ronaldowati-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e4dd2d89701895f36ad17ab756a2809f9d37933207c4c45c82d3522688ac73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164722 Malicious code in rino-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5962d9332e4fa5a8b253ebe07ede19617c2a949aa20cb4df6da9d1a947807768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163367 Malicious code in nokire-rara75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc21531eea3fe7bfdf1a225326a0fb48e0da0c2dfb45ffd7066c8527eb02ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b826ac53185e6b712a0b3585d3f25a8d6c92e4936ddcf2e0fe7c37b485c51da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticaul-bisusaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26f78413359827c316d03c9c322a7c3bac119f21f1ccb6e96057fcdbe1736ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3feb7642ca87d8e4ca9b071f1960e9607b71406fc3b5ce3e02c050c528875334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a9fbc7262d1dfe2ba184c9bebee76bc6ca8b9b6ba1690d0dcd7bb35386f3478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914c2a85e97a5b253eb81bfba1edd8c23a29bd4a3aabdf312d655e29ea61b84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ff7be3771e62b8dd8ec2fcfc83ab4ef6fc22d5a52801367bfe5bcb3a0fe856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagnias-iofagigagg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c6144f5c04fa26e8054abffb2a55af4925066a67519fd7e5ce414747040e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogaf-doifagako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849e532f350e46e1e46c7c7663482787561e9cd015ae4bf06510815fb67a721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656b316a77553cb3a20b5c95464f8cc6622bc9f5e4173f2b4fe1bef5843d7b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mandarina-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8764e01a7c0d669ad44af5aadb8697bf2bc8fbc223e31482dc5d6938430e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb7788043e5a85d0fc3a558d10a378b542e7b11df3f3dfce3bfdd15ff7903c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaior-daraeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de57f48d208a811cb0aa79826b3021ec36ad1f6534ac7a24d049306fc777b58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96ca438d2658aef2a4067b3b944ac2953a53d0acbe9ce973ed3afd7f927696d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489b0991049558a38fe48cde21218a8fb29098d2ac05e48c81a94d60f45f03b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...