MAL-2025-157813 Malicious code in kuinsu-uki-vilabimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d323c2324c2242f9078f7d73cdaee01e96447154a932b08ca8d4d44aa064c33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f5d68df0721388f8e3054de3b51e805440682ce543447d6cd858f0b4f0ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151398 Malicious code in abina-amuguai-anumai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06209b2d90e0930836fcc4ddec79e459336cd5cc82493d414f06118dad1ee6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nufoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e63861ea3daf5d6c31dde59ebfcc1ec5fa34dc74201dfe9c22d4595a227ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164647 Malicious code in rino-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e936d6c76641f19277ffdef57832d1f80c7788995fa5545aa8d925867307117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoi-kinatm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272c645d12f3cb7d3f72973a35367f53775be354126218adb516c5e2910cdc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152222 Malicious code in alfiansyah-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd52437ade9c922a1b1dcd5c229d01535b0e58facb1fd909dab08d628e4f7b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kwnhghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51e962ece28c9b7a82c1b1733559a065312d49d8377221b38bdba35a7d961a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e769815889f68c618f6a24f91ec402b2447fa0ef3ae86522b4d7c8142c633a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170427 Malicious code in verify-aysali-aisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6459c52d691ee22a51528138f617ac9aa3c4ab69eb176e1d1d6e2cae314f0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151671 Malicious code in abyikula-nioybnali-lauyukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f766399f1b2530b71d5089b864ee89432d3eb20564cc25cc1805a257dbe250b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7973e371382eb59610311f03506bbe71510051bb8ef890be310dde6cf113d2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a53d4b640531d32f054c1f9cefa4b4de3685927f902c7435cde62695c063687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163607 Malicious code in nokire-zenitsu20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a49080a9d8a02d570231cb80385bb966f9cabbc397bfe30a5a48e8595bc83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166314 Malicious code in sunden-dibok-inumaliukinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b461a2827eb37e41379b82f56d4538a661e789e9f9c836235542c392bdd8886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimmn-afofsaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4207c6945a51979b37437999d8f7a7c7a07d53e4d33d6e573c09493d705507cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amiabu-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f05f1aed2ca61d4394155b9928b37f9e4471b9bc212810b4922867358270bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sisuspf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b4c7cf4290bf104673378d9f61310e53c267f9864755374dc6cd524aa5cc8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b711d4c85fa9ebac2673636dcd60795907e615de71070ef873e49867bf707edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/jns-21r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc0c03bb2d04ffc9eb406ebffed10b24f257b43cbe6ea2a411b9fd3a8f53937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...