MAL-2025-163738 Malicious code in nudela-agafkaff-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea2b534bd3526cb156d117b4043c73f0930a7770d6c324a0e642f42efb3cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166926 Malicious code in teagood-lokika6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5419af8fc5795c6456284fdcf828289fbf1e60f88f10de59228ecd4db2a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167385 Malicious code in teagood-nalikami112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9d33356f7e10e00d195f07ee31352580161f2f60348e80452a9578855d2891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166491 Malicious code in sunderlan-uyud-vamunanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0483b58894b042422548798b0727f0e99b25f4e29c6920064c0d182f2641ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadasi-sciddor-nassop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31a201d1a98bda06a853c5c370eb8cfa181715d26ee17474b339a49a35dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfaafu-dafuamfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b4348f9237bc689b0a993e99251f988ced25c5d63ca8cf8d31aa04903ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9ab65164331d95751cc3d4d7769d87415c0c1e5c1114ee968d2c0e44d13007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d640c309079201380dd671eecea1d5ae9003193d7ede2e384164bbb633bd02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12603d10ba192f8b090018541882d1a1fef18619eacd6eb2a4aa9bcd10e4d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-21-are2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7289883b839312caa1d014a1a98d0dd2a601a9f6a1f5ada0e1d864e266de2108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87a0b1c12f13fc48c90a05b8fadfdb5cc94f8c5f8d01d78e741daaa24c014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-codifad-nutaru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e4759b68082ed297fb24926a83eec3d833b415441d56e9f9e422f265ec01b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-mindatas-buipenaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da89b3928f080cbcde72348ca4047d1935fec3e0d9509506126b6651172e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c902c46bf0c30784c829895af6845390fd646c7235a7bdbdd709ff24cb5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efde767aa3c14092fdf78faeb865e5e6a2f1184aa5ba0b5338e80cc2411fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647ce8215c5816ee312e689ca6b2fd8a3491ca17d3f2017485daf11b971153f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dad3023ce9f15c05e58eae07605108376df6147cc0aa3edbf2fabc4cf89317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3226bedba2a957cfb16817949385bdc6defbd93c53b5d498c2bc752401d9f951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6439453c45d2efdb8168be93d8039e5b0b975c33f4f2cdd98eeef9ebed4c157b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...