MAL-2025-152807 Malicious code in aril-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e547210cee7c020317a68221994a3aa384b4bdf1a99f92c9ea7b57332ed960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157879 Malicious code in kupai-lukta-igafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69918accc8a368637f3887e28cea4b0b64dd86a8e176a16ddcf13d233cdb5556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164214 Malicious code in pilka-luniu-kanuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3623d0b91612ce83c1cc563a9beafbacb452e27389cb9b7354df7ccb0a0d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162333 Malicious code in nokire-arhani22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c996dc4b75532b5663087c3b5102151c5542c6d6464b609f67f5ce2a541e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe139cf17c1b54defe2cc22b0de9f57b9dc981480ff1d5d612d15b23a4f2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f20dc9fd92cee964ca755b7c6a5da102f09786aa4ec1288e69bfa23772ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3848c2560816823666d6eca459034d74a18f6e555439ba7d3a188ed2a7ff567b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-ufahayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec7dfe6c8c6efccba7452ece90a7aeda7691f090acec66849dfc30a986cbb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioyanai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b1b245870244bd34957e916e73e95f2829d088f4df79822dec93ea995d477ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167099 Malicious code in teagood-manaki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d729bc9dbaa0c913fd247d775686fd686f8a23327abba1540dfce6b170f3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhfio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118933b613d5194a2513fbeb2d8f9a522e84c67821e1933ae172624a285b4300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabudaaopa-muya-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4940ec59304ed46a5a161d886111a88cee749ce4768f172a2000bee03814a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b6519c8b82b42554e613d62fdcebc936a374bac10f08d5b4b81f79d1d72bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fab5270db1a10f0ede6cfb429011718af5d2af8fa744bf22b78a8813a076e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wbo1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292b2f368c52ff242900419076ac2f7225762e522eebefbdd8ac537efaed1a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-turasah-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffb600e945892c96b4db73ab518e7e846ef816b1ba35bd927f03cb4ac95966f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fati-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb9fe2f25539c1b1e3d3634df8d5f6f14ccd4d143783abe4ec0e19db52d788a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1882e1ee9898ee8d0ef591533afeba396864090ba7f06678f4c92dee7b6160ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ee9d2f711a4550e86541069a561ef5413c1074e5edacd8fbf5345408a4b886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd2d9d47dc4465ca73ddac8e3030eb3397a4a60b8f0a9e442972a891c2a72e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...