MAL-2025-169015 Malicious code in tehah-murasaf-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9968411e5face8b7f5648fcc45bbbd0a34395558d7c9bac39f0d6b3e6839589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155957 Malicious code in ican-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d703613bad2587583db3bdb037c2d65cb352b564a68623c3ffa1a451884e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168946 Malicious code in tehah-bauta-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362e185e71e7832e6ca8388c79caf4f966e002ce3e61cd35c0c38f47c86138ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162003 Malicious code in nasution-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96dd4b105e456fb7ef07fd6043bc808fa204925273fcd5a71efba642a68bde6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161940 Malicious code in nasrul-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230b7ddea62ac2c547d9e9365c9cd21c2ea26e3c1b21bb7d0e6b59995a0196db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimaluavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae55d9069c2165801b3df1ed692360a77414eba3ca13ccf69b7b7f2adeba6e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aln-tunl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbec5cf9f228715ce7bb8d9bf8e6948dfcb392649a99a508c472d305f690d80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamikamualam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818e790eb287faf95abc8ad390fc3b3138cb6ad22ca6a8e01acaa65ad0faf79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiba-ufvga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec54668c36a29d8e82cf0833665f40316bc2e9971ca35643a68c1d218504743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08112aeac9e69d74e71b618b34c3056b036234d112583bf79325c87c7c73731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofagoagi-gmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51df2a9e37140fe462e7a18899a12703873e31f766b2aab4ba03932d698fe7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db8113ca0b7781cf3f87b0383f6051af2b662db5a406326117126e75a85cbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6c55fd6c9a4c52c0649738fd61e960c75a8859b7590c3241588e48a8c9b00d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pj-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca64e14f0fe2f163a0f20d66fe79655489febcdcb06eb10a91f45e1d94bb0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ns-so1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a885bd290db8eda725e6582450776a934cad7adf99bb9ed994bb5e4e3a939208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b2fcdaefd68fa2f4bc4817432b6aa410e86ab0a28192afde5fa1a0c0158e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e62912b9c68b933e52bede732bc5ef8f8063204d3fa4650c066676dfa37b4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b27579be9880f19a64655ea06597d5126ab11eaadd4b9251295a542b3f59e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-maonldzdddgfai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf84f9dd4995af3bdba9d0784671c44c3333ea154ab611bd1b6b7e2fa399636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/a1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a9a9dd9ab62ffd2fe7edd46cc30f83ce9f4b50532961b692c98cd818bd85a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...