MAL-2025-170353 Malicious code in verify-ayai-gali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4354d057206b6e9ce432b4313bdc9602c435a8f6246dc520d5e24c767b8262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150065 Malicious code in @mipta1/istdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391094e61156471ceadc3faeb4eddf688d0020d888fac630670c3e278da29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152240 Malicious code in alfiansyah-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62205bdb4333e53bfcdc8afa660f4af2b60e17344e546c41e44f066b3f5311c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151880 Malicious code in aiboa-molope-asiaamaianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa00c1d0a141178e30e8f47d3c28ea791f64a23e89c00a027c7492094a6241e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159830 Malicious code in mansila-tiala-maonldzdodadgfuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83414864d8032d121bdbf779557b37971b3d3a2af70931e3ac403fde380b6331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157745 Malicious code in kuinsu-lubuki-viunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dbced14f38cfb339e9dc1c26130739daaed8217a91bd67bf1e490397623b554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156020 Malicious code in icha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d8ca40dfd69f18bdda83d35d49c44802817e8c5a80e87511d4568725621515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasaaibalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5ecbec4a8390bb68df5baa351fea6e58cf4dd926f5737b97a6faa00b94635b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac4189e682bd61c04c05c948cbc956a0378acfa6ba9467d6c6b5056878a1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nai-iyulaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 798a4f71baa071becea1ec947c31bed4ba79a73ce17fa101ac668c495c738acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877684067dd1f950d3388ff6df509537ff7b3994734565efb44e2833f22d026a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114b8c1a95e2462e0fd3f8f976c4472374c58a1e0c9e4bc32f7fc52f6a12ad82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0629cebde072443ba1f443220dde9673b3150a80fe60f7daa4195ef71167501c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84fa737bc4e1df0a182d3c2b816be370ae2cfc704fc3abe5d53198a03487314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc083c3e622910954b16b040c42793ae5e6cbe66ebc4c7687add8f36be6505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32074d1d9b7f5d170a5576dc4d1b26d3b5a96d3a0fae34bc1619fd0f9ad83073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe1453947061a2686f7e5f5708c644480e2c4a0144657138755f7792e11589e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a023756d72965e2698feb590428f23353c2fb533449d76b8b552a1d47b31c2d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-dulyabu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa71d6593e33968aef0bb873a4cc35b883fb9d597768eafce41cc567d1376a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86c88db16e6ee0d16cbcd2d910e08b232fbac861254458fd5a08cd84596d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...