MAL-2025-153738 Malicious code in billa-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27545c6a6fc3b96562e884e665bc94d2f6faf3c1b4791598a633bbfbe704a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154504 Malicious code in diago-kulp-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83615afe0940f9a74512123d12b3cf404c93228b352379d15990fe2275ba3295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152572 Malicious code in alvito-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db63b4807ad47d651bccf2aef8f5210692aa61a1ddb428b857966383e2f57c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157863 Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161914 Malicious code in nasrul-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43cce915755c7bbcf934f6855380b6d75d2a63db88685c56ec53f072a5799fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araonbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e175a7d597475d4c55242384ea674cb2f6fab362a5ac34d193b5c4ace5e7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tifjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507963ab6ec770480c0aaff477f59c6f3b39ec7c0fe33f3e8ac2d7b82357799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936dd8da2e49010bf8bf616f3711203587110375d43b77c241066e7bd84fbbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0844b1290bcd3eb9e6adbad66a7451204b87613a59595c60d119fa7bc9c582a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4e62629a437b1dcbe2e0a5193c4c835c8bb3a116640125f9965b9774128377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afde26f4ea986bb9b04b87724db7fcb5d8327ec04dbd6bc9379fdc9923349161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3036d7d622396cf5b1c8308b043ec0f7170fb519342256273b36d3d02234bf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusaggomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23934f6fac48654f3f5f94b3f3966a614a43a49c6a7187b647fd72ccd9c6deff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nualea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9da9afe5e170f04bffd3e595d27e14b44db6b6a8e92df99ddfc81987f386e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaig-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa39fdc4443998decf2b175d104a20f04fd9c30389141200d9feb4f540f99cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-manusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a67c393ae7f80f230060f0d3de18b4214d2bc83a1725c002db985df87ca63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...