MAL-2025-162753 Malicious code in nokire-korean3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb8f5fdeb07b16a22c1ad137a7182c5d1c8db347710190e3a0edc1d2ce29905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170574 Malicious code in wulan-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999b82b7b0c8fed52a63455e0a258a69c0e3b407fc7e53cb49d21ac9ae2f0da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158799 Malicious code in lookingan-namala83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c905efc8c2a727010e7d9dc3e4b9d79cf28eceb418505fa8f99a6a87bc0813d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153751 Malicious code in billa-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a260442344a79e904bce89ca6f59d9febd6e9f41ff94eca0041cbac948bebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159540 Malicious code in manaf-masaya-nutsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9476d9559665fe8e58fbb6c7fec73adb1d85300a480e2aec88e3dbbd88fc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169509 Malicious code in uaragifa-afat-usuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f92199c426e43d2bde0e9b0f6b02011802813ee3dab282b857c3276d5515bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164968 Malicious code in rita-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d96ac8e1d867582d9cf105ae5bc7e7125fe07e35b39666db056b350aea04946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163804 Malicious code in nudela-ofgaf-gafohahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448b8d2819201b07e2b42fe3cd7ed1430bc91a35668151833074ad3011bba162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153781 Malicious code in bintang-tea32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64baa7b0c4f68a94ad30d74808ae27333232afa9a01ad067be0dcf19d45612ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165949 Malicious code in siregar-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcfe031e1e8ea710e4ba83a2cefc211df794e43465cc691ef5bbe341ca607dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ee357077074695bdef626900d0d97631168f74184a940df4feb015b71627de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14c33f0f502452ee65ab49626ec2b6fa9ce8a6b451eff1a92640fa3f1770d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusata-bunjsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a7dce45db82401786f93a934ed9125a1746374353ac9fabf84ea6fd054d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94245973ceddbc1f2e02bd973df7cd403d64cead8fe5b497ba291e671db21ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munidr-nerf-usual (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31862fe0deeb39693794f2da87672e993e807fce88ceaa6dab177086a96b800c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unoagoagi-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b22456857042c78e465f5e9ee6b8e3ad3f66fb5bd434d16d6a1e2e94ce75375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb8ad609c5671a7c89d438a20ecbd4b74aa755e0f0e70ba2eb2826fac7fe9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uki-vilakaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4511e64c024d403713277b007c832ae9155c193d49ff0feed177812b5431b7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ifargafai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca458cbf014b2d4589f64ccb5b49da88d7c8c9af044e1bfb141ad7544b3933e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5b19feb7f30d351c3b397aec7c3f7a3ba07cd51d31b4b2b5262379988055fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...