MAL-2025-153467 Malicious code in avomainah-fagais-foaguyaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb57986f51d6ec9b3608ede6d8c8b4c8bb01a478d964c8bcc50576eb02a21a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159927 Malicious code in manttu-muape-butda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3e6dc59efeeeb2b34fd62fb089ba105a7231b8e6b3d151d44752388e35f2c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166404 Malicious code in sunderlan-ud-vaimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ea509e61fd8481f69bff8732fb37db5d957cf4c38b43be615cadb3e421bcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165121 Malicious code in riyanto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbecf560074c5d52e809fd273273bfa13b7fb60b5156e276e1742326822fda20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161819 Malicious code in namasae-naiua-somaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61336e40fa26f0dc2c7a58edd4ecc88494a3ef564e60f0324675f6eecfd3c207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153872 Malicious code in bitha-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79920f17e17991b4378fc2230bc9cf83ce72833566355b1b3610fce86620fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168288 Malicious code in tealove-darknest31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8d2d677ee2bdb6da61c412dce81ef17ce613017f16c2868259be64b66d775f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155238 Malicious code in fitrok-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b5b647313a43313d94d7b9aac7ed541d5c7d2d3d5edf454a50f36baabda197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6c50d950c3e3db6496969707f3079de9e1b2e8fb7370e94ed89ce282c92cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54b1171bd3764aef46fa8bc2ecbb4282d43228d6477ccaf209025064ec6ce54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c3433709d026eb618c6177e3516b64a83b6337b5110c316f4c12c42d234d093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauof-dofufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99368d0e092cadf8156538f9f098cf57f9188bd6cb7411242c8c56c85f3e3533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-asaka14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a224cf9138bea94ea53cc86bedcdb7b4b281ce05e140bccc006f74398e207a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-alifi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464ea19b5d84eb0c0b6c0fea4bbbb03f52c4fe6b5c45e041de6eaa5806f945ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04fd8ceb07f68905b6b564ead35751f4ec780f05289a5c5340725230257445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3f6f70bf9f6e04db62bee5b1565cfe8370361fce4d1e220cd0c4d81ed27715 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e760ad24de9a26b83b1a5321f63a2c107a89732c18969b00864281bdde3581c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-ung-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e981aae59afc721542c160f5b115b7d2b8bfeb43bc7ac2945dbc60c16e292fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soradidaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a81c7d08faaf5c1d73f3c0ee6b1b8ce2028ca74be911a7c59be6cf802c1024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1240e06c635b48ac3403e4abd6f3fabe5c4be323d6ede35b92f8cb85bd9d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...