MAL-2025-162082 Malicious code in nokiragne-afgafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4259529ea9530518eac8d590473b8cda6ccc8a66637bf98495f94498a9238740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169329 Malicious code in trevora-mmiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38bf2723ea28c939496f4dee14aef7c7067331af00ba789ad15a7c890b314cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164865 Malicious code in rinto-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ada49c7affbd0f4fbbe6c6e24e6f2eba7075e23cb3295b7ee145bbb5c01f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153823 Malicious code in bitha-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62cd656c13789eb16bf2b4a7c43f7d35b0b890d456ef9214fc670ddf4fadb23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151503 Malicious code in abiuna-mobi-amusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5917899c8c798e373778d6b35dda29a040c4e382a0a4011c24d4cd1d5f0c3ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzi-ilmuzu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e127b37af9b9ebd091b87e8fdd9cd0d151d3dc623f22ea6a342926334e74dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9578361c41a79524964bb770614f3c6fbb125d6fc6a70f6ae4a17818c84defa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211ba75a2f1623c497a7b3c606e3864a269f428de7cd2aca507c61a04b2be211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notasr-ucsl-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283fdada84e07f5d3fda0b6911a79f2da96844bdd227ab52629919882e914e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08b48971385245fa7726e0cb92dabc9f51b371c655ea307fefc6b818c196a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-espanyole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d671688aa4befccb96383037d56a8335a876409687fa9ccfd56001521f4569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kama-bicuibi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9b177fd1c150ee2384920e778789e26e6ea7f1ed7bf1d87d586f1448c53a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d675ce992f27e68bc6f69a7db2973cf2778837eb9afca9e8dfabd3777c41972b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6724a50800ddd6c4ddbf3c1c17becfba42a03eb2504a1bdf9a4019d7f6fc9ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/eraa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be27a2b5c68ac51ab2e9f78a5a845ecd081798e41c0e5507063f5c77c852c496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-adaea-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0935dd6500c83cccddada9a0c1ce959c4a302e23c838e71b580d20964952f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafagarug-mufie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e41b019e3110a50c405a97bb448270cdd35d1ecb799d21b4d11541ffce2df0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asi-manuds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad29bf7ae26a22111daf00112bc698faea3324d756ab0edc68d338514923ca96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhfj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3437c8f370c4ad8b23620585b255047a28a955eeb232a7fd87ea1cae45c79ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-mudniofsps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6863bf640cadf7b925a94f1c745fb1cc0d0d3d7763c11bd15113e61f7d52f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...