MAL-2025-166635 Malicious code in syahmuda-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f4bcf577d20782bad3179efd99d879a7cdd433465ffb6b21b79b89bf2e9d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165350 Malicious code in sabua-muhay-tadum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1528c2c2b290651dbdf5ae69c45589533cee88bde8e86d890a7771f04d5652c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156235 Malicious code in ilang-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3b7e31e27545d058ec59d49bd617a2a650846cb2a071f399ad5fe0a9a4df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158404 Malicious code in lookingan-nakomi44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360f9b9a842e6c9ca6d3e7130e8b8f698d2b0a35fba8b8908c57b9435d8fe99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156432 Malicious code in inal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a614922b86b6aa2c1aa09253d38195bb3a61875b3b6c9e60873e0b54c705297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169443 Malicious code in uafagarug-midefafoi-ftusut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b44085eb24f71ea8fe20bf6df707485cebf2feaeb07452b1035320ed54f4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166473 Malicious code in sunderlan-uylud-vamuiusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccb2d639b4d4bc10603b7e71ae51dc321d81970dc29185ee762e6733426d196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166251 Malicious code in sunden-diak-itu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32fe7781cc8e926b549d0f8cc9c2b9da4fae001d083b176f6e5abf315894ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158279 Malicious code in lookingan-konami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b22dfba2db354db6150bd93bac5f993e867fc7eba76caed312a905117bf6870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c0011be7f6c540047107256873e4c223e7163761cdcd7ae00ea368fcde356b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igafo-jagaigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817621ce0dc55ce92fe3840371140206865ac5f0d6ccae95683db725b8efc9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suftiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d989813d1f5f08524c902513c3a30d6ce68ec67ca16ef5ce16dae215b40aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-uks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db23131ef3658eb1bf94a40373d258e217fd7324d2b12806bb5a1061bb2c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-dana36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423fdafd993c40c2aa9cf8358101a39854185d78c84ece96450d29cdbaddd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumafe-nafus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c6542ae112ce385c3946f1ece1d1c51727c8d3eab715bb4ebb497cee6c7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wjgu1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9a3ad7dea920e0d9ca2e72312af752b7ab1d1456717cd9c44d888529719812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...