MAL-2025-162077 Malicious code in nokiragne-aaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085959a20f38dbdbc13f82d3c52d3376fab095c73ca2a3070b6d6177f04ea7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151344 Malicious code in abina-amibn-aguhami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39db00df694ae40264a09a6dab1c6be797103995bf6853f3247b66a3fb323dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156115 Malicious code in ilal-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b50c6ba50e6f1cde8e7165a3ea3147b5b85b337706ca2ab80dcfbb8e5f2d76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166460 Malicious code in sunderlan-uylud-vamkanakunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cb5bc27cc659a6c9790c31a24ac3579c92c36c761515974b90bc2c3d0a29ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169374 Malicious code in tusaaya-0as1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5505f0d4151c159e97ff045c95629fe43965864551acbac08c9a737c6af3531f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154931 Malicious code in fadila-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23a512495a2d7d824eec10e31e1e3a267ffcde2fbd6b593adeeca80c20735a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150875 Malicious code in @miptaa02/nyas3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005a5c5e95c96953d484a8edad65a64a02aca94c163b5a57821e473a7876d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149976 Malicious code in @mipta1/dcx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d882c6ecacf79bd7addca0f82219215ff79797c8db63089a44da5fee3a64b924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192bcc5126ff7a9c6a9834c1280848098b7492e732c3b361c6d3d32fd5af59c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wju1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe163eb08a9000e9486c6bcf9eda95b7fa31dc1b91b1b1b74a9fe3379c98322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd3ebed6eec632c620c374423d4122bfda4ce28a65e0289a567cda7efbc7bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agodofagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a05d11d2945cef126bf96c0533321c1dc05e6a7a39bd554be1b2ce172c47a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaifas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ba559dd2480fbf1f8f0c1d76a849af683a171568ab607eb799ec87083b3a4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04799e06ea2ca4aa7cd19ad274e930630f755dc6465e8592277b785d3805f54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaaior-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19da8f6f781d1eab6c5a95d1fb61915285948d73ed9dab610b13f917854db282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanu-otabauai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218d23a59c005a0b2480e827eefe51388194d9f9ba706f0b12314ded66f12bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3682141e8247194f2e1cf866a4ef61401ba519306d5954cdbf890b609da676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-alusakilamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd535e79de27cc9e20bdd8b38cccf88b5514ed7ed34ef6717df1895af7237b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-peddat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5383f3e14c5500f9e7b17157de433d6d55ccaf4dcd8759acc627fac12b65691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...