MAL-2025-173175 Malicious code in buis-manuias-botayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a0e91a45179b3677bbe483c01642ba531da66a94c5e42f6384c2ebd1f50ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175286 Malicious code in kapvino-socvnvi-bofnvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ea0e0fb6b11980b81d7a8a5eb1ece9fa3cbe45e81ee2cc621dfb7287c33054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176101 Malicious code in miftah-mipta6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534b27354b02ba43d5c80f4aa250b8523d0ae3c0de133efeb99b9514c56cd581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178202 Malicious code in rindaman-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e902c9e4358e56918ec40cdeb88b5353d3db457934ef27433185db63180848b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171508 Malicious code in lokap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1ec63938d120a042243c01c8f26064235da8b9208cf14dcc58097357cc6f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171995 Malicious code in williamdavies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e005a21c0956c2aae6ab17fe8946fc09436b812a3a1dc189926116ba5e7b824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525c5d1e9f9d443d6b3da7c23f419d8b3fb3ac42e93b3145f50a5da36b6b9852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5727ce1c05575da526d6135f4c6b1c485e68ce3aceea15c114b834737fb3975f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-fras-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e48d4f5c7a745daac2c33bb049a5f32539ca1090439cce5bdf1390cda30dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e649d24ef0b6433ef50b1e03e9abe188d3dfc85891911b00009c6ca25b664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645bdaa7ea3ebd63a423346c979d92ff2a56eb2eff30d9e78cae905caaa99e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-klsimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e1398b238a51b2fa04ebd74e9259b5a36e8b2e57fc60fecb7428d498b2bd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159689 Malicious code in mans-manapa-nuyadya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dbce09e93d02d8bf0b24aaba3cb8bfa211941d344641a154e254a251855f972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0afb8fbb65960b87e76d4578ff06d671acf9d2aea7a96ca0f283efcffa12e50f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulio-luokauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94699be3c77c0bed2b5a87c383166996e4a3834b1d3ae87ff6df5abc2a6f1468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymeria-mayania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cbdd8c509d7632e2717513e70f71a6b586e5ea703e97970dfb09c3eaf822ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e031622907c3de861443b0e460ee05e2cf9d219a384df18ff55f5a101abfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54212d9f39e75d89d1ce6717868d02aa36eb0e930ccaf7946ad998b198216b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuoaopa-muyafig-budfaiufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc64ab1950d93a41ac83cb8dc8b650019b05ff82484984bd9a702163c9888c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f3f791359f4cfae22d7aa0a844b686dbf1ab802111ebec15be6d18fd4bb7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...