MAL-2025-161894 Malicious code in nasrul-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281d30a3b6ea3e8ee4b329e611e9e3f055c88e7604996e7c9834e3dcbaa2994b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157684 Malicious code in kuinsnu-lki-kagbdsasoasdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af77e80899b0f3b791c4160aff2ccfda9eb21aa300c74247dc817a84e3493c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150850 Malicious code in @miptaa02/mrra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595fb9d0e41a0071a160d157cdca1a0a065c0e862f977eaa48aec646dc040979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169019 Malicious code in tehah-mursa-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 910484b267a5bb97b4cae1f27d29e72047c517a79d742ab15b9159ede15f743a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisubutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3db96661bd8052961abb876c121890433b5ebea05f45d94b9f86d150a181537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuni-nikamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0facd06f98306bd92b00961eee8416da88c7b839338bf494547a0bc565cdd70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b4201ca7aa78404432bfb0dd4d8ab509065817d33477d6e948bf27e8c1e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec22b0cb1d8f566bc4856b65db063c267fa92f2c7c8ec670e96724fb55ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdc9410329eba8199d9106bed3a4242fb7394dc2113fe8e2bc9978250946b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3556d3480edad0653a8aba7acaa799ce63717fa918b62fee8697140b36eff49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3748433f2a80450f9ca7c07836a291a00d022b55366bcf7f990cd345887abb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856fc2f9617d380ddac2c0e4f7c1b3f8121d8527cd0d332fd56af5afb88a983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6457dcafe7cc3e12d5efc0fca5055425085a274655c9905a6c2e0440fc4f965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyau-tuyagdat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aeafaf91533e22542c10c56822e832131cd226752e01febe95257f41db0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cb3649236c5c49767b2d0a2e7f76bd0b2a77e7b7e364a7250ae83144a88b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muri-nddssyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ee1621291df7b5d21b1268b3acf851fa16dceb6348f0ec881993e15904878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78146787eec10e34c2e732a4a2bb559fda3290016e3ddff3ce9b96d0c4c80ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...