MAL-2025-166488 Malicious code in sunderlan-uyud-vamukapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6347562da1aa1f5273ce3e5f8357c9588fffb5c64cab6fe221a2ac1edd07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153181 Malicious code in avminah-fagmas-adifaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff2835746c914cca02563007230ccdc1690d3db2f149b0c35a2990600448b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151604 Malicious code in abuibanua-mobiman-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a2dded8301607796db23eccadabf5930bcd43b1d2e12285df0aa4c2bce2607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169024 Malicious code in tehah-nadaas-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650cb5375cd6df7735234744eb98b07efc3204e705588ac128dbc8f585f1b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156103 Malicious code in ilal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8dd85fb416f696654327028a8507a6450aecc2057af071a4d2ebe4a5758f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162724 Malicious code in nokire-kore36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d505caea2abda0db6591f1733c76f2dadd4a34fc21777364beabbf864936713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155321 Malicious code in gifa-otau-umdotari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bc342b09bd021b1646f507ccd58cbb57af03ad9f550e63e2d5c22247f39989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164526 Malicious code in prayoga-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751b5ba5e5c4285f390b8f0fb473c498dd8fb0dd6ecf5f80de767a45ec836047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160010 Malicious code in manuk-nai-ignuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ab36aa9254dbbf0076fab9cb3b27f00e6124b448a450c63f39d3a0c878b24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muyua-bafaugua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d856d4758ea98e0cde2f2c0af0e70a6f78dbc8066bbb0050f208ad8324eb6aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e193a3e43b7951246b47c9c86c0bbaa161acfd37a26d1e39d45860cafef7023e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef24d557088be0dcb632987bb9031a561fd482584e50a22ef86b810feb9da54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559f65fe9c010d59370d3afe56c331ebddd62ed1046d74a3e7ea86fc519c2dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d4cc0dc42f9c5778e7985e99364bb8873f74efc292b489d09a3d2f55c9aa51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f7912ba7ac1f0fb2a15115ea20ca2a6339b25e998bc0a4de09c7e62a98d9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2df89c4619131ebd96bac85e1d807b1e64314f6407dd112a7d8d1c66396ce2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a80797b5c665ba2764ad2b3152245820dc7e28e737d7386cf2e2fd9ae9c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446c53afc80743de65c2d341010d624592a05dbc075a4aa6973edc6e8eb2ee8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e84b84aef48677d1c2705d98ac8d215de090ed1496b694a3fb11b0a70c6501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...