MAL-2025-162458 Malicious code in nokire-arjuna45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b434e9ab468494231c802a9034be588e243719e8102b6c422393d4abc9b6cc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150780 Malicious code in @miptaa02/jiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6683079957b8081b4e94f912fcd4b8fe6bc570d15639ee6c219965e837956828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151400 Malicious code in abina-amugui-anucmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61d68dd568f7e64e8e04df221736873d8dc696951f4cdd48ba39d578493d47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169037 Malicious code in tehah-nutawadr-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d785f05bfab38c79b240e88a0dd09626c623281bfa91df55392ee76ccdd7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153753 Malicious code in billa-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0b5c668c8bac2836bd04095e9fad8ef8aabe799441697bc1be67831937bbe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163817 Malicious code in nudela-ofgfaf-gajhagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ef681130285ec8db329ce62c49f7d3cc26f3c8cbe0eeb65f57203ece672c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161874 Malicious code in narai-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da91cb0a48ce8a74ab6006f40089ebd59022d776fd14048c3013431e7aa9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anbzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7492ab522dbebce0414ca4b94df321c378a0299e45cb7626cca58f249e1926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yaasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ae57878cabf493e4290035bfe4b502ba9892587c51e875f1261276c168ad05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vamuua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa76a3813bc5944233afe1b4c80918768e88009e73146a587d294188a9621dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-mibon-aguppabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b6ccae464098f5ba20aff166a47b6d28076477690e488a04bae90dd3c3aa62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076d0ba85b2d7e6a737deb5f17d821b0d31676731bba8a1ea6ec9c0556077b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-andapakati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f929ee603da6368aa1875a85b6034178716fa1d6083d6710adcc1b69ac724fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kloip-akagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14496306f79646e54995019a6fb005c7727b219da2d2287ee0346dcb3ac9ec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/assa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7499b02f4b929a85e498b0c78cf5f9a4839d4234b05e94ae1783de7e10f42907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in griem-nutr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea4bd936dafa0db8606c5299ea81215d1a129c4cb3e90bc82c3276bf4525882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-ufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457aaf558bcfbc095704889febcc07fa1047db928f39da89b17f3d17b1b06bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-janga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6ad2877e7a5c4758657e1eca6ff56d480fdf6e0d6477299d57c5da8f956f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857beb4c00b238a20cff9917d1bc515b2014fe6cb8557955d1f3ef9a300a3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...