MAL-2025-158700 Malicious code in lookingan-namakita84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3595b082d2f5f1a3e02cb67e18fcc4994dbbb8290e73adc4281786d07d3ec769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152550 Malicious code in alvito-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4004f6b33d65747893ead7f6d916b4beb201375a7e87b87e00b66067a9d1b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162680 Malicious code in nokire-kilua86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d3e68e303b975e5c12fdfdcec7d4486425ec8f10ec18b8c869c03a51d10ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163104 Malicious code in nokire-namiresan50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52ad13c7fca628b85a609d515494a00cc96cd09f5f96475bb24ec61e7d42717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152863 Malicious code in aril-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f504665be9a5cf2c037d3bf244b5f6ee04a110fc0b1f9959ebdb7ad6ccffe0c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150335 Malicious code in @mipta19/ad-ofs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec829ce5a107e3d058f7538a23e63aa5723c320b78d1008c0f8ff2a76c7f28c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166687 Malicious code in tadashi-tsu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f62555020dc84bbb796f7da298d7b26a2c6c9fc205a9e1b01e0f09aa965f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161657 Malicious code in nabuf-otomabin-nojdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89983dc8bae92873ebd93e4ef872c4893a5ed9345cdb4880a5df2925f2ccfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuyaagfgidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c7e17dc3b310059e25983e80add8793ba9f203b32c8a65b2636897bbf19708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24e706bb8d8ce38fe7c92857090fb1dae9706052fb4100827d74b3a041cafae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ce3ab0e51f4212b9deafadc79c41fb13a978ac3e0cb2c780ceaf5414cae3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuyilani-nikubamia-luyabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a31d7a13e11e4756d9b17f2aaa52dac2cafcfe3e61c4d7bf4b7f0f9d71a2b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7aedd78f0c077cb7567205cbb835d1d9274e670698d341c7808e9ccc141f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-au-idaduan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0f041cc1fb2046473019027bb533f1958900307019775f077a282444478ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhuyu-tadadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c023d203c269b040f0598edd0ca54344c42d9021aa2d912f9094fe84e1c6ea2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0b495eb8e5da519a1d76e2e6109a09db2b702eefbff041a6adfe0bfaf23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afafs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector decab8b45cbfd7c5943741881f6bfecf184f065122e8b6d07ff045560b0ccf98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiua-mobani-ayumanom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc388cb056bb52a1dc6e8889a3b92eaac059a80b79dcc591778790dadd1c4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3fc419b24a7c659a81a09068bae5037ee1a8f7a4afd7fb167bbb4e9b3df5de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd32fdfe17c6eca18e4f2e28a72b42f56d7819b517c26791643b1054585f8868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...