MAL-2025-163282 Malicious code in nokire-nanali3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc69c2b4c267352e3b02ebce0e3cafa8ea1b74d100358de3c31edfe2d606d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milisa-miaop-muioskfp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 406ac5c721e4a80d1651bd6290e72f716949047d8c08de133c7e2b4b8ac526c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agfgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e793ed0e582d7456fc3e2e93cee51f848d31a72dc4896f1dd53915462eca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ghds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0f85f74c1de5fa742996172e323def05f150e61dfd243a97190c7e5830576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc6ae9cd7862e47e53f487f0d0998742134ebd361039f7e45599a4b71b5b2fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1839a6cf0fafef2284249c012f3cb9b5c2554d2df916fe1a3415ea62fe2718b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdudfdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bc30bd25673af07313989ab47b6f2828f05e7ddedb978b1b1d3f4547df4049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aumaunnaaata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9625cabb4d4eecbaa618205a984ac0a1c050a287f4d366a71bb2a90017dc7480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-muisyau-fafiafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f190ae7d0402286bdddf62c7881e97e43b8bd47f40303c8a8a1123b1dc7badf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fb9b958f356b28bb57ecf6cd03b8b55f3936343b1ef3c06a7b67e9dfb8c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ae41f1e434ce597b2a08379d3736b24b8d412ece621f27dbf4fe0cfca6b5887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-uffai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ff0eccc6a5a5393325a123bddf1dc209a86bbd54b6ac81a5fd6a4824e11b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5983d2bd23b933b52fb560df8c92a0014d3d1a301e58a14dec3571dd49117057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164492 Malicious code in polymeria-butper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c140b1b7ac97b1f98a44e0b3c004ebc106c38c05ebcbad82863c01d8a05c8ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161124 Malicious code in mutdaufs-marimasa-deadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40b7042e19ccd70378771e8672b0005c16e7540c7f33b330da877e90e8f660e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170140 Malicious code in upilka-luzikumub-iluanoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fb79856b584a4a449fbccac0a87dda369ea91cd8fc5b03b4b08449099e465f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161055 Malicious code in musnisdr-terd-mpn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d98aac98f0981ead1d9e49c30e2907c41905d96ba0cec2ec5ce3b44ecd763f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaboo-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad507a9509e646a438b3c62bee393dcee283c4fdccdafb32af4145298834397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ee7ff8b21bd7c7ee1e709e76164189ea595e586eeae5648e192ef157657be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...