MAL-2025-163177 Malicious code in nokire-nana25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bc820b2107d66689978a3c91843fa4de88d0545544248944dd7c7ffd9de841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166810 Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169720 Malicious code in uinsnu-lkumi-kunamlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1246547284ca1625890907769e44d0eafd85dad8dcacd7676ebe7e11b24bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160327 Malicious code in messi-jdga-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272c6d3b0f51aae4dda32fd80f5fe9345132283911b70d9ba23fa12af3e9d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162799 Malicious code in nokire-lokcek44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a875032c4c53920705b7ba9655629341168e71ef1801f6fc031e592f391ec26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51e89d986914bdcdd560f4e212d3079ce58c7af8bc081a06b8e63c15897980b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-unusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902bfcfdf304a98028b1ca2c652e75d4681c69a1259ec19f185e991f905ec5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17752cc5d0b7ab277396a1f12d9da918b698b658406c877be853dfc7d413da4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fia-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de941c70417368ddebb38db6e20d6ed64c028fc881ff8d6ffc717d63769fc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibuok-inukuilo1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737b054f08e0939842d6bb736c74d0389c44d37b84e920ca9ed6b994995fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b69ac9385c207abf88b41cd737a93931395086a4074587717746cc5c22bc42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4c14babe25b097d420c9c1e2dd4d9403bc800a6954517a82dccbc635f666fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2e0588861b4122a4bdfafe20e4518a33d545b6d0ccefb2954c8f788cf76df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/misyeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef1a3fd30ee49bf4ebef01da2e1133382d2d14c4b6f93bf59e18a9ad8b451f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa34a72db2b03e5c6e01f852adeffb80d8339b99b3b55fdf841e639c39f28b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08112aeac9e69d74e71b618b34c3056b036234d112583bf79325c87c7c73731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ns-so1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a885bd290db8eda725e6582450776a934cad7adf99bb9ed994bb5e4e3a939208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vikun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b4fff5f5b1ea91e5c4f0920a7a1fced90409c069ce46b9a8cd831a3c0c5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugymi-amamagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6c4a2c3369205fa54145bbeeedcaa28638012181503e49ef22e38b5c68a7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gaasd-19s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc99b4e82d2093f9d0b898713d44d320490eb2057567023475623b1de361f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...