MAL-2025-152776 Malicious code in arif-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3dca87d6f89196ca267ba454971461b2a046d40d61cced64fe34440ea0562ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165708 Malicious code in samehada-fhzhs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc4825f4098a35e733f3e3d1ff172e0cded812518249ef2d844a52b61ecc4e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160420 Malicious code in milaoa-dudio-nsastu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4637454e7445940ffac0df464b2c625b3eba7046e8d311ca16b65bbd0a8a1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149936 Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155003 Malicious code in fatidra-faradda-nuydua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa3c1c1536ba40bd111240397df6a2cc9bf82f3263adda888896f3941ccbe7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asin-nabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc35fff61c99e8abf1a65f98e556989812b612cdeef6d8102c1da991e6cbb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muri-burt-reat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf0e31585c232c156c0dbd9b7d93c05072118878f12024c8b0e20842b0d0933f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2546fce91a94e6e6a1f4791876d0ddfade2b2cf17d9bc44d93073bb619cb91af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-luaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a11997b6d0e1e1de4829dfc9dd08a38c846134d18f3d300e6d12e72ce950b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in matane-cookik-rai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee7061068cea77ea541df1ffef45dd11c30caca751c6fc57c8dac8f4e5a2fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fianufahia-jinnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870883b808586c77c7135b087c9679e1d18185cd8572bc2c7299e269a7bfba9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ikdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c5f14fb93b96772c2f1db29f5b2b12d4806221bb4d410d13404072d03d01c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a3269c781cb833944431f0b102d13508a174843500367471d15574f07b5ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03c7acc3833f442f58727e489ca13cc61454f8209a7b7ae54c718e234ad49d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jigugmafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e471e4f7867aa9dc24e1a55c0b8e264279efb48985303ea675b4c5c5ec126552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gota-jamufifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556d06afd7851221560bd39400445d60d3ff14599ec29b83ee7f8e2e76874d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608cc5a9f05227bfff30cbd34afd9d80737d1a499c286aa882615ee8ac0d0546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipie-aramismia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799bd58692d633006d4efd17d4f01dbf012b3344e556422c440b2b5d7d60f9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...