MAL-2025-160629 Malicious code in modirai-fuia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4b253ad12d7ed1e023130fb7581963fe5e5892cbeffd4acba072008f82d828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168128 Malicious code in tealove-boy22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c012863103bd479f2422f4b6e878abbb8c31a742f05c7876e8b504021ee318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170092 Malicious code in upa-lubalauvalio-iluagsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc30c4aba3af80c91785511ed6f06ef355e03c0f7e9ddeac3d6017920048512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160840 Malicious code in muklis-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2337629d9254167c72534fd58a3260486407d622c4b628e48719466742afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160750 Malicious code in muda-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cb399712f852082b69492d9b21431007b2464211ac8d6f1eb90d9b390a0bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158305 Malicious code in lookingan-konami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c840145a5e16f2146eaceb7e7b81ab6ca65722a404126dacf6b2f3e20f7b23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169873 Malicious code in uinsu-losiat-dilaubaamukabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 580c6693f1be61842014509f4e606a205e11d5d7eaabf3eb9680937d7fcbe20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159181 Malicious code in makan-aiga-ifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31de54e1009940be29d3cb6c98b08936b426a899df6eaa370876c9a805b3aacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162064 Malicious code in nitaaus-ndeudyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55b33ae001b255167409462fe9e7a18b61d33aaec2636a530a7adcb4915d6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iofjc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c224414a70b12b45ac18632edd535b3aea7e21fc0cc624b36c3785d2c081ad7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0646a3990ceacd2514dbd8c2399067bdf4ef7d471fa808f43fa624311def60ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agobu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187426bf0ab824e46a809378b3b80442496a6f86944b8bc8a786abcc3f6a6953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d739d0582bc3d85f3f27b37097c41722be372e03a275098de79cd7f35b76a427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158b710a80afb97336b5bc838dfbecc8676eab65d39317e1acd7016cab530613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8895c66784ad5cf3047d295ad68600e536282eac1b07b6a521ffa066525e3c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/dfsdaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcd9dff5d642ab7ce5e55ea0db91ab928f4676f82a238769b0c6d01e92028d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421e341a5598cd13543280307b3ec2d9672ed7c29d9b1b560ddd0270a62b8b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuakdi-nurtasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c4588c9a51c03fe01d24f1ea1dfe01cbccdc979148935e2dee7fcf47ac3708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76f51ea5e991c29053a2269d3136e90941257e620e79174cd9b4dd09482c278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...