MAL-2025-159401 Malicious code in manadsi-scidor-nasuofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2bd87dc0fe4f0813f2507e55ad4ce2ea39cad60f2f87e38313630ae65041f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170390 Malicious code in verify-ayica-amalaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 834ebcf9982737f49e83081c7805e6dc56f23622dc5fc1290bbef7c09a47975a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa1sa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c972dd560589a03209dbb562fbcb5a195ba83e08e34ee3c7061971020c657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167483 Malicious code in teagood-nalikami8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c80b4b01e646844ee9c2ea4edc811509a6b9d101f3cfe54fc1ff92b0079f088f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165698 Malicious code in salabunli-nalikbuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b454499a4d1316ba8a52ed4e16fb71ea978b932f72905c3f8d6368a65535b30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b716b125b1179e396c308dcc931f68966b1c0f6a1af4a76b379eb161f5904590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-bsesr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d50de89880494382de69ac9b97089e100a3614fb991f3dab3781adf919f6689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d952163e3056bdc65a97ad3a660539f42d11a6f94d4206bcc5f9e357e6434a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mursa-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910484b267a5bb97b4cae1f27d29e72047c517a79d742ab15b9159ede15f743a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daf1a8253c6b50f3bb50003990fa3d87989d9561d20364e1c837a098bfc3d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a21ab917daab28aa62f6fb91f4eddb39c9607076816d8a653dda9cfcda27274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82272626002e9bbb9b12f46958a468e9f1a2790a697120c444cd42a45b5e1658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e15dbf45832f16765cbaf1ca40262136742208486845d4241f075abdee4bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ajyeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc11ce066e76929b5c93c526fb9f27af25b6d9189bba752f32caab9d7359b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 144b0195355e0f81b96ceb70c3a5ef69c2b51a99d24cca9f842b36c1e6e9c80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-miod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd07b443266a3ee614bfdac702308c38d2ccec0d33c06b7932c8dd2d18ab125a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codfd-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bee567aae34a6257752aaf7f37fe1fda36f9395bfc834cd2ba036cb129b52a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161888 Malicious code in nasrul-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 777200f9024941c7ee70da96624964d55cf4e608d88f57c50424306316b07483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150109 Malicious code in @mipta1/kszofad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfc8ee7767601ab171f5b231bb420cc082b64c9d4c8c7dc407d9370069cb78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-buibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c84eaa26b544323642cc4793c435600764c7bc3c6d78f8859eb0c9994b063c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...