MAL-2025-165370 Malicious code in sabua-muhufafyu-tadamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eb5b9856a6152b96896581ed7e75b4b8f2b068b5fbd8ed6567b7a4096a32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158081 Malicious code in layla-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce7a77d11483793a3a2f95409d44f7305eb86e5082e464971f5fd44f71ff38d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156212 Malicious code in ilang-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b072419320cd950081d2653feff8051d06c9aa0b6eaf2b62ab6ee5dea3944e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165373 Malicious code in sabua-muhufyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4597fa7d902125053916b42567b71c93070548bc9d3831ea280a5c30c57a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154780 Malicious code in ewa-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172355aefa8768ca314c99ef4e8962749b813e25f39c379b80fa8eb0b08cb586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151557 Malicious code in abu-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242808386df9bc7902f4fed69aa0a0b47cde0e0f3275ece1278add2cdb38bdd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154360 Malicious code in diago-kamli-luaola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee7ddf4067280813f70066a6459acb80f498614713f57be8341cf635ca63441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5035bc4d86ce7cf833f7cffcc1f2fddf8136389932c2badc37dd13e5c32090e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nai-iyulaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798a4f71baa071becea1ec947c31bed4ba79a73ce17fa101ac668c495c738acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/inila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bcf9708dcaab2020576b4667be0fb0a2c45d13fce12ac513a87f5a8cfd665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soradidaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a81c7d08faaf5c1d73f3c0ee6b1b8ce2028ca74be911a7c59be6cf802c1024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9047f69afb543b3f7d03de80db790532db9cbfd1ca1009d43c2d42261f4fe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unagayu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1166f80dcc52ee0e4c7f8c19f13fea1415748d37b51c4c224e67289b6716983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-miadpashaofap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0180ee6047da69ae4e6316f851323eadbc45efc8f00a0d9a5fb52bfec1566720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc083c3e622910954b16b040c42793ae5e6cbe66ebc4c7687add8f36be6505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85016a8bacd6bbde106508f63d7e26964993bdb91f812067d084ba55f558565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cab0dc959cb482f61eb5756b78ce9ee9898e2e2f9334ee43c2a1b3cb664887a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b0cb71e35825dda9186306f12981f2f39204c98aff44acd03136e7341e929f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...