MAL-2025-163697 Malicious code in nudalea-ofofiari-agutaioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19df116910b3490ea742bbf57718c58d8f279b81f65e669dbddfdf70a325aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169768 Malicious code in uinsnu-lotipmi-kilar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30f7d6a707225d2d4cf16480756229989444b5523d9e538d2dc29f259ef969d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafu-tuyagudat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f34568bf2f5ae159369552122819394c7433546db32122aee38ed4f96963e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169135 Malicious code in toyota-cir15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39220b9136fde5c10b22612b256147f53e211ae4877504b049953b779831efb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42d70b2e15c01851177fb992e577c80cad783954ec0a937f01e0bb2b7e153aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilkiula-lukuzili-ilakuzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba55797ab753daa3ef2ad740f320371f08cf03395ad327b6eb476f173495b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a92e0563fc20ee92482f3e8f6b29d4b9afd87cf0774f6357ce217d759addac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f55c00be90ad8a2a531940884e53d89af9c9ccea2c6f2668eaa7c07eea5680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152358 Malicious code in alita-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72eb915230558258e1e43ff3fe8772e19e47b0c7ec082650447781f5a55d3c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-nutradfuaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230a51defe1a425a3d45c9b1f482beb0157938a7acfc0095b8ce2e532dc89a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d4dd21c0c5ea1cbf2964384ba8a0f615f7a93432852dac79e2c6b3b689c529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kalop-kalosohabak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fbcdd7504cd97a9ea310807bb9def00cef0726154561b01588e6baf17642156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ebce270ff26d89780a016a3acbf0114e2ff53d47f37318d8663cbd5c1a5e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-asdf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e5a4755d374a0f996b159849e7bd714851327bd914bf35ddd0420eb3cba1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dfdca966350240bd552f9f733516fcfb54d27c78524e0479795abaf640d098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamli-lumila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50219cb6799286cbc2f6ff0a7ce5fce315e2d37f57996d5ad8e72a6691c37191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157942 Malicious code in lala-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8f79cc1961f49b7eb5b85e9fa0465aec3c0f8d5f9ca777a818f7cf3d35da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166677 Malicious code in tadashi-tssu-ren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9597e5549857f09c0f7daf84d16c2b6683f293903a97f78ef1aede9341f0df10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163502 Malicious code in nokire-zabuza15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55db6328a22986a71e453994b1f3c21860d1c32ca2518361feec13634190b64a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157261 Malicious code in kamasada-natai-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed82ab102d579e7705d7fb7c2007049596ee1e4822b19e44d2b8f550eed0156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...