MAL-2025-159405 Malicious code in manadsi-sdada-midadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a9eaa99b2188b2808cf7417846a82ee33db3bd4379458851d8f5193629278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163654 Malicious code in notasr-sucsl-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24362859d7742a995dc707dfcdb6278c9650454011995e8703d0949363e56a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163419 Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161896 Malicious code in nasrul-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414cef0b309c9ae0b3a6b05c08479d81bfbbf8ff910725252e8c32aa67889842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150991 Malicious code in @miptaa02/tunn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02225443fcc85151b0a4cfac64cdd7de0bb2565f19b531750bc9f72056906be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163067 Malicious code in nokire-namiresan17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3623daa0f8002850fa82fa7defccb09c9f4de5a424da945f88bbda29d827a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159958 Malicious code in manttu-nuyati-munidyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2385911d335109fa89cf1ced7e7e11d98581ea2d6a76a69f7be4bd463920496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-biabm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e926d0c94f66f56743b30a3dabaffdac3b6c61886b815b78269dfb74a3a7c4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nanagai-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35da831865283f8d7a5569504f4b4c84f193d66387cce3f9a77d98d6ef223115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c38a61e3bc94a6b08215c51fc6f3e9c39ee22ca1ad1a442afa02d3d3421f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be64e59162cd7412e0cb7e153d2ac9154ef59717c94e3fa7805712edb317bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a06558798bb549a1148be9f31b651cb0bd06d906aadc8f191995aae6cb2dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-nutria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b57038d0599e7fd2dc2624fadcaa0d1d6f66d0b3ea1b2138f9953ef79d7ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsswa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1fe6181ae3f1e4efb6b28958b34cd6be845aa299deb89bbe527be7691e73ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugi-anuhuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6129b79da168112986856bea7404db4413d1fece558ebd3a74737eeb1d35d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polil-akilamu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e237799f0852608095c5aad7201a1479f6f73d7635dbfd47da16bf42acdd5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4594522355e4ed524442bd0a7204b6f4509d182a00f9b6689c12645ee3533a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroha-manukangia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c1ae203efa70b8629cb3128a10a3c6d6f819077f6f7d3be9d1e6005bc4911d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f533b447942f09876718e53b392b4bcdae109595f4cd3c892ae40efb2f87ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/miwsads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dd67e95ffe5d080ab223610802562bae6007190dd47116e1f68f59abd296f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...