MAL-2025-153508 Malicious code in avomainah-fragis-oguanuafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f6fc703c9573b995e51b1c9fc485c17c9db8298c2eb190e5351282e1ed79a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156904 Malicious code in irashi-sea-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d758cfd20ad63f61a4a784d7f23d8dcae49675468821457380da4f989b896c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156841 Malicious code in iqbal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915d1dbd60f494797933c6dcc21bf9776ef72f231c85aeeb51ba8e828f76142c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159488 Malicious code in manadsi-soroi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a8685df02f3d31048f2547898d82abad7b31aa43e583f4d02b258ec125cb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165876 Malicious code in shilang-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab0b1e63c5d8ca76cad5fabc46dd21a1160764a5cc608a2cdc184f1b9a64e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155126 Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169509 Malicious code in uaragifa-afat-usuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f92199c426e43d2bde0e9b0f6b02011802813ee3dab282b857c3276d5515bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161887 Malicious code in nasrul-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51f66244025cc373af9b07cd928032063b5b095ea5fd59563dc45a45a96c248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f243a76957f714222810057a6802134785080ab2fb1e45853c37b50b7f861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nai-iguna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e082b9ded7f8b73535f5586be8425b78d66980e196655dde2c41f45a61e0eb23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-au-idaduasasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36777ca2c4664675e88f1d8261a8236d0bea01df7dc07d774a14011c2dc005a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51fabb5dfd6372157913a74d8d46427c7aa2b7dd4b9b110bf08e779972e16904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6657b9d9e62e0e73b7874b53c4ebc771110038c78c085bba68d207962740b83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuina-mibiian-auruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2565c86be76d53cbbda0129e89f0f4888cbf054c42ff38b11691319d4b66beeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b69ac9385c207abf88b41cd737a93931395086a4074587717746cc5c22bc42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20dd8e2424d6491635d7c2f05beb8dc38ea6c76a2cd1a7b648a705cd5fa8d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5c1d4411853c362300317659f464e58c70f364948f8c4492c7e37d1fb23f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17752cc5d0b7ab277396a1f12d9da918b698b658406c877be853dfc7d413da4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagimas-ofag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49cd11d503091ec42e0f9a5790c0a80bbcb180613b9354231dda802564beb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaimaian-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4fb361b07e4f34902f18f142667692dfaf51a3053746637ce8b28ab81d2c00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...