MAL-2025-160118 Malicious code in manus-tavml-maosiha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625b3059c5e5200ebbcaa77e893887686088d5797ef1b16231578b051d595ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasd-as10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e115af794b2394611505c7949e9641e6644fcbe1add0f10c40c46492b75f09aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167104 Malicious code in teagood-manaki39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8574fb6e59f4368ac8cb07e9ef08c9753e8301d6467934f10e1a4ffd34860e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168441 Malicious code in tealove-nanami13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c6f2043256461201c942fd26e688413b0034ca1870fba4a04c99d7e239074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162621 Malicious code in nokire-kilua33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9292f6deee8562af705c674f36ef986d0fcd9821df2c01671b58037e5783a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc684f820c21227bafd1e47a8555be11e73c8efec7c8532467c97d7dcd186737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164960 Malicious code in rita-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 833f342be2c6fc26cc492a54ee32d925571d460c4a5128c9c5405ece80a68255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169064 Malicious code in tehah-nuyadtasfag-munr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cf37e36680529f561a65424b99af2ae692dcd690731c0da69e0cc056c1d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161564 Malicious code in nabuf-otmbin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60e74b9dbaa2fbd7f84b436d4138a7015168628e196df1d1e3c66f514a5e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155788 Malicious code in huda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b105ea58b369139c07d139373484c56a591ebf075191dedc073c9145845584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ee720c69fa2056196ea48943e5b0317113faea88a91aa80093430b90d5197c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dffg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0e66de984f3d7be61267b681cc1b54056ef14bcb6e6a36b49e025c4ef541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aiun-misiuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c884026ef46767d9d65c9df20b9e897cbd2a1a3ca2c624727812849c65b246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-aviumungi-aubati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143061676506eea5b57c1ad3330f95a366dee50a747b616789649143547e5ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wjgub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501ba5bc14e92d50b7173cf540cb1de0bd0db3fbd8a5466e1f26ca10bf16d3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuba-avimun-abup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09de1d1edd61a2999279537facaa038aa4d956b2036b1bcc0b812f17a497aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42c54412ff27e68f66cc8422bfc54aea71eaa3150f2e73cde14bbd9a729365d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sssad-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6c560cad40e32387106cd1e26c1109981f01e45e9f60b9fa9b9fe8af3dd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...