MAL-2025-159945 Malicious code in manttu-nuyati-miadpasofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd247bf4cfb44c4155254bd1eb0c1a948d692f725cadc370eff2605c849a899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asaigfaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5766a91127be072a70c57b835c3a29eb97db8bd3ade37af1b6eeef3450780e71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/aoshi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4f514fa5811b3ebf6bfa5036b5246bdb040bf235777713b10f780ef836ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f50d6c6bdd2cedfaf7bbfe97c8bf0c7ddff9c3cc1c0f88b8f1c98d9b851bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162698 Malicious code in nokire-kore12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08a9ac8b8ca594602816d62cb5f8290098b1d18a1c90fbe2af70379a84444c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofafafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c95b7b26daee26bff5eff26c855d513c9302629e6430b919879202f2d1fb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708972f026f574ab3eb49006e63c50a1d1e3cfe326683395cbd6ce0c99601c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0f9c62ca015d8bc6075952cb5b2372299ca1a1a69659bb5db2f11140dab08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164438 Malicious code in polymedr-minus-buipenaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7a77584754b0df1ed6551c159747189fd0a72a1576f7ad5d9fc8b69b263677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150596 Malicious code in @miptaa02/ewas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11297cba1026799f7b2a2eb6d8b3a09343a6aecae250440026eb73fcdc82e19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152685 Malicious code in angin-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb874704e04d0e76ed014f46d6a64e3d5683ac42dbdb9bac217afd6c1eb7f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauhufu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239f025f22ca384cadd656055daa37f660cf8515baf80c4c53fd64fc83aaafb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163703 Malicious code in nudela-aaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a77b38c12c536c290d327436007054a419eb00089b1b405a5f564cfcbac20fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160158 Malicious code in masako-males-nb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7927142b1c649244f268a8f53196b2e73f8458ced1fd4466f6e8d064191e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159337 Malicious code in manadi-scavior-dareena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d381e9881a058df4d0354af50e826023cb0c0a24ebefaa2d65fd83e1b495d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158095 Malicious code in lina-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba7d9da64c2de4442f6f9efd27d53a0ba854455fb5a1ba6b9c3b69c3a662f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipie-aramisimia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4e524d7d421ba1bc43e4074567a6d15a8eae59cb1fe791c27cb146fae6e7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c54bf352d67bbdc1244586375c82be3aecdf0e2aa507ac2aff018f96241041d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162653 Malicious code in nokire-kilua61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec15d6e7c4c48353d8a756fcfa79fd8ef39d6f1369eff0b4e8768adad50092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djhoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce6db07697023fd8e668817ed85b45f2b4d8eaa1413f26d498c5030825c3475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...