MAL-2025-177415 Malicious code in poglymer-ogmimh-avigpafdoaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10d96e582f391be94f91d743b7da3deb701ccbf8d43aac63c9c356f3cfddc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171254 Malicious code in gamilquiche (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a9f0f4b5d50714fbec0a2144202b2579b60c2416bb491a8da5251a63922bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171260 Malicious code in ghalibbasit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b19f78c5cf6a263acb76d84cb0416132e26e1cb1b3466961510a6dd0ca44dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c339a68d157135057f2eddc9124e6bbab8cf34e4e491083df688a7e5ef81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1da38ed5d646fc4425a78549825b40bf8375fa0342a0052ec2bbe94c43a8770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-agfifagaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0c921de549bb95c3914920378ada8c9e0c5e8ee89902327142fc6868ac398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasismem-ani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43307d5a817750e4ebb05eaa5b7e5b13ee43fb83e28606bf06e0b547521e442b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 282743ee2d97bce41f5878b236c923d4a2770b002f81ab00e2b90e36b52751e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12f509606f4674588bf93fec6a0227f38515a44afaaf82ccd2920f83052eea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd09ae1c1bab17745f4fb5ac44a7a71578614d0bd04a9315e13aabd4b1b2ca41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-ali-ipibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cef7ced91e81cd99e5d0a15d0d7caa4745f6e1b546fbecee52fba5c15760f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadasdhi-dfds-nsama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5286cf2f1befc48cbadaa88adc5603f0220652865b633e42aed9a28a9bc2f5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25610220a2bc338cb3003945fbdea3b65c993331af5142b066b100b708076562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fss-s3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e476a09f5e33e93e19027cc85214eb6cbef85de00da2af33c0342a1dd4bfef37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149995 Malicious code in @mipta1/dsfss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770e530b18bc1dc2c10fa3227b744df883ec6292dd383c0ece6533f3653b1373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163631 Malicious code in nokire-zenitsu42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e6d77f557c1b68674d24af4445d3198643d7c63d5158398bf378a7e443ae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09be7d7af749d8282628cb6683ca903388164a5e671211b928d11ff84145787c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159593 Malicious code in mand-nofy-muatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fef3796a744ecc445c89ce5e4b55ec33256caa499cae53adc1760cb1c9de642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b9888ec98247c750120bde6faf81187bb5a379c5798a05933c223702118d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168076 Malicious code in tealove-aruma21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d256036ca1ce7223c552a906b97a184f4b1144966fd13bc45f2a321c04c68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...