MAL-2025-160783 Malicious code in muda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f496862ea8e4c53f58f0665d8c4920f669f09784930187484dc220bde8500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168878 Malicious code in technical-aln-tunl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbec5cf9f228715ce7bb8d9bf8e6948dfcb392649a99a508c472d305f690d80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-asaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f41aa92ee5e887cc34df72cfd5d805ceca082df4e8260d8f31989bdea774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nauyt-mutst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408746d380f5914a67a201d90e4a19f9f7924ca5a89a5a5e375584f08aa6e6ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdsfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bf939779c7f68d692220a66efc0df714dd043aa74b0c5d077e830d57342f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7c49b8fcadaaa06d17d6ac1b1086ea67ed51e5c198187ff8e8ec1a914e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2056e24f0bd8ff6e5662e88269e21853b8bce3a8eb82b129a1d91f4149da57d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1bb59dbed8d2d35ca65da9781d4e31f4fd6067a23e57bff3c056469665207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/asdd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0768755b12114795a5f7bb2f8b4d05be5d093c9b38dba48a9e7752efbf3ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mhnal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe2a5c697bdcbca1d5a2cda9fe4bfba26612659dfbcd1fadce9d3abe655c005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10421acf16619015bc867ab8d27fec06690b0b5643f0c4bc7e5c2edcee0b43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutaagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9d8886a3741faf34e745d4886220320414fc9b3a15d559f99fc957da0c0299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2a6395ad3cadcba6810c450dfbc45f0dccf50c139e22c5f848b37e1357148e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156028 Malicious code in icha-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2a8fb38af5898ed4d194f72a8e4dcdc18a741b967e500859e7636116878e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151692 Malicious code in aciaiaggu-idat-doa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849e03658b49e80038659ab32879cc230db9f8f6e83573ab7614772db652ec73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163387 Malicious code in nokire-rara93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd62a6295ce794735ae8e4f4d5134ae3331333d89c1b2ab11a6df8fd867d171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170030 Malicious code in uinsu-loti-nalasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82c2e7cd235b37c1fa0ece461a6518fea5003209fd4b65b099c57c4a6dffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155104 Malicious code in fitra-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ae83c7c35510f221924a5b7da8e9e6ebbbe70ff924269454ce71c2403b7a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155390 Malicious code in guras-darusd-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc3a4b50009ba4ad44132b63a37a20a526f0a04a7b9e35494b3bd5edf9bb904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170423 Malicious code in verify-ayisali-gufanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ce3731c8bfd8bf931ef44056f02bfe000a752e82b5213c39f0b86d1fe7781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...