MAL-2025-169340 Malicious code in turisna-gsad-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cfbdc81e10028ddcbe09c7e3f514576fbaddea7b8490e01c4b5cf165f1acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161261 Malicious code in nabila-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f740f40d9aa43af797cbefa63ee27d567d54925879adf73297da83620d5929f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155503 Malicious code in gurs-abtdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739ca6159a7ae2d86dceee0115d6435233f75afd355f1462020f4d5a13282410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158508 Malicious code in lookingan-nalako93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041c22202ca8e0d97ee3572cace72fbc77e487d83e2cc16d19c2419dcc687108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd561ad6ab5e8a1e5d4be51a5ea4718984cf12e62ee98f85fdd82ff0e4a8089b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f87f073af266c91778b1e536c4455149017e438037b80d51e18bd93871c5fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamkoi-alasioulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d986f6fd592413989ddb36b05ab3a670e1ce27a839a5d25e36e4b1b5726cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lukli-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d883a081b0762bfafbc09ed7f296c2f92059c0fd4718ab962572e176dc424849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3998de5ef483b486d15d9f0b7657bedf569e0c67200b56ac025608b8e0574d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c26702fb24f0a2b66317111037d1b367d369fbb803b8382eafa74be14472566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forui-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbec60b24dcd462fdee9e9d2c83f059c82916720e2f61a250b1b67bd7cc6f20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d4b3251e6f7155f5b943fa8c924473ada2e1011b8315f247c8e2830f959c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43287bf81090da3cdc6fd52a3f7bb5bd863709d846538ab2ae75a71b979a124b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89fc41f84d18c51ee0cdffc9b9d9a935908168198935ea7aa03f1b84d44c92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aibia-babu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05da10dd4983389274f7d071f9b5834f8567e68ea76af4bcc8b1e529a298af82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luvuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6384557b9e82833aaaf456026fb0846daa9911d6df1bd5f9fc71a26376b65e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-bfugabafit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e105b14cdb0c69e4bdfae5d05ec7e3a26aaa98a2de9282a5520eaa3739ffc4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e6b5a6946e656af345999f9a66b267e2d816c33cff20cbc9c5f108ae0ce78d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-naafat-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8129f46b9755af0d9164c2eb298676938e6db9638b1e9d0ada18544e9a4cc24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...