MAL-2025-159788 Malicious code in mansila-tfla-magaazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5500181547ca3445f6d7e6d517a6f74c244b07d2a23ab4413d24c73bb75971ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162606 Malicious code in nokire-kilua2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46df2e7807350e98b3ec7732aad6cde656286a50bd109faaf1492abc2ba08cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155459 Malicious code in guras-ters-bru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab475cfa4eedb5ca8526fadcfa0eeaba6d186f41d78f6d09d392d306fada073c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150901 Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/ns-so1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a885bd290db8eda725e6582450776a934cad7adf99bb9ed994bb5e4e3a939208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunalab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c791a7b243f63aa95d47da08f2277a68abf86530cfb6932f43e1ed7eda6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2e0588861b4122a4bdfafe20e4518a33d545b6d0ccefb2954c8f788cf76df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-tdsasa-t9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 983e38bfc8c93155ad38a2791fcd0b4c133887e3bb8fff046827e7db70ebe11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-kalimasda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3367de1be25cda97f3698097ef2ee13fa2f60a37a26ae61687ad78761e99d3e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyaudtu-tyt-dat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5209296fbe9495b5d0c1b816ee8e9818246bd95b71266783bceeae762f5bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-asaka7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8161c468f5abc943405a5f0bf16f064926e3c87b5bdcb062f1e4e4c8f697537f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muri-nddssyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ee1621291df7b5d21b1268b3acf851fa16dceb6348f0ec881993e15904878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a091b337f81bbcce201989cad3aed1501654043d866747c6e1f301d307162499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usutauafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485afbdb8cafd83e03cc23fc06a67b5774f225724d5862854b6f45af8da292ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-discussion-wide (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0990336dfb79ea0c8c6dc3c46097edb0f01b281bd807cae4c7c770f5029a3914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b2fcdaefd68fa2f4bc4817432b6aa410e86ab0a28192afde5fa1a0c0158e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vakumnaakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015ad0fc4724d26ac83e32e99ad863986fb178e461a0032d6c2f6d2182d7ceb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b6bd0b8b6182cdb360e31559495851bebb399a1ef5a59540cd61fb14ab04b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...