MAL-2025-153930 Malicious code in bufpani-mau-nafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe9e2bd2e1d52cf173d15f9299809f8ed6753a171af4ab75f9d4531c41200f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170572 Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164652 Malicious code in rino-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68aed14ffadd09a342be17ee9bdb0d6af66cb3649f834e9764655154d461ef87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152941 Malicious code in astia-alabki-maloloiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5df40fb60ec777012361af6b41b9dda7be75c0929690d41a6496bca6619b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1fa211b3394c3f2e2c733a3412d88468bbc8bd746a2bbe06e69bdcefa69f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-assin-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b1b53bae90b0c3f5668f7c07ff1ec427ffb447dce56b9b44dc2c6a9c9dab59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e774fc47544d1a2c833eb62ed7c6b4f42ca902f070054f73df4d79853d639f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df5a7d305121e702e8ab75db490e2f7ac5a95acd0e244af7ece2c9f1a5f5e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudahai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9fa3d1d3349030d54f2d9ac59c5ac07926cdeab66d0cfd538acc80c9b8aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e71c1c03142c8a5f21ee78753aab5e036549665e10aaf2bf84c0882d2f671591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/azxsaxfsix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6db2e881e6835bef342d5a61930c514fa32fc9e7d1c156cd34fccc95ca7531b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d96bac10b49d3ee888d6683bf3aa5cbde5c9dd083aa7470562cecbac510aedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eb25dd4c172adde19650dbdbb5ec04c2451b581f52a274a777d8ebcdefea13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1568150b39b8c26d2cc3769ef90a038a24a780614cac96978cb2018ec25ab8c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d1e25a1df091a3f397e934b11e60fb97341af4ea648911a3f949413286ec54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilualsgsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbaceda6520832936bdd3d76e731b8552c2f0f9b9fe5b9db7a02e96af2e4f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169642 Malicious code in ucok-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca986640e10f94540a3a05effcb5c62b7c80b0e5e3c2285c16479cdaa55f885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161179 Malicious code in mutssrio-muiko-mutryi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647837727d77ca6e995de91999d32b2cd35cae156b33a744723aa0e3968c9734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164655 Malicious code in rino-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bc5b815b9047def3824cfac976bdd45eeed244835a392aa6c32b4e1e933c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156760 Malicious code in iomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfdb8e55b59b50e0319418dfeb3947ed325d340ca70d774f3a2cf8729215bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...