MAL-2025-157849 Malicious code in kuinsu-uyilu-vilanuavnakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5dfaa71be2976e17b531aac7b3f785318375ee93d454ca64e5dd2dfd28ee39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164314 Malicious code in pitra-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b78646e9bc6d18eb562ef788da7534b3bd33469841bc136e6709cbadea3aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160903 Malicious code in munir-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7557e24ea05fa46f2446d940ee05c119633e9965d211a5b1a495cb68b318fce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153963 Malicious code in bufpani-muisyau-fanmffiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4d80608d3df9fe8f804facf1ca9150d2cdd11c76197b33cf0d674325995f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156063 Malicious code in icha-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e32cb2e4609d72a2fa5769c4ae8d06bd7ef427149382e09acabd87cbfeab9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169072 Malicious code in tehah-nxya-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36db3e8a5d59977fadf1cd44dc71409cd93a007a0deba874bc6d5b9a8f10f8d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91584b56bf216b444af64d42a38d44bbca350f8aa074c7957e4173e3bc34d03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a752d7007cfa1c1d3aa790693b53e402df77febda7fc5094fd5944c585806c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fugie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad255f81daed1203169a1541814d435377392b7fb9dbb9d1822004b2142e7e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maraneufu-safarai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1d152197eee453cf5c50a1f5c3f416c7bdecd06cc47c3747d5500d4f90c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d8cb4b1928f5d22ddd6b976f6aac5250c635d2737bf95ab9539f712e8773ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fabc6f03ab03c51bd9d0037fd778488de89286a6912fce162530ced5eb60a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinnauhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5a99d6ef68598587375e9aeb49d952b4263146e7fd87f3bef2ae0f0d776b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-thfla-magahzfidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42d728a7f415fd486cca90b4a696c68be9be147f5f430afe2964bb184f2d443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikul-nionai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0a057870c66dff8da5fcdb31b96c804c6ead9d93e17a96e5bc08822161fa5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a057e94b830ba8e1807669f78a8aacf36dd345bfc63d6b5001915c212d092b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62703a9382322bb8db38861f79cc8ff1068ee047e6e9abb0045cf55119994d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20dd8e2424d6491635d7c2f05beb8dc38ea6c76a2cd1a7b648a705cd5fa8d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al1f-dareago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca9a24023a0eff97407a9322658e29e03dc75a3c0a67e363ba74cbf61f1f0950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620e970886fd007eba5d49d01b472db10a5943f9f3398d058c5b96399fa22a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...