MAL-2025-171281 Malicious code in guilhermecosta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a7001af2c42562b86c921516143fb7d4933567c74d96c377c1e38ca0961a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fd0beda889f6c2d11f2000538c4e4e750c554612a884873c557de0cafee81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3636b9252883f98533d036e4760b3fa8ee64dc02d82510c32a9d7f518d8e19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c57cb9e12bcc7e8b8d7f3d14102bfaf1c3142f7d9c1671116198fc501fe2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c3e937ee83e3b0c3510c3cc461ec36f64457417c1310370f5030d2dfe651fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9f53cd55664c2fa935b0b15cc460f4f95f683e1774b517f045fd64dd044744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magahazifidgboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4165fb2ad9916b52af4a9ac6f3761122fb4a6072427b813f66c0877027f3a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhayu-taduggmafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79897282e7e1b59106248d0a3b6a9e6e2093426078cf6a7803acf602cd1a7f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foa-jafulifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d4331c74432a67e9e5174a8cafe88e295483d418a943f1b5294b487d30f66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/yyta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a859d2c0bf102f44c95d4511f565e0cc2d0f98a3abd0b230866ce4549055d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151544 Malicious code in abu-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3536025414b7c383c0eee603ebc226be2ee50a73d7fc5b381a1839ff247a8af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157251 Malicious code in kamasada-buyasada-daafdadir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e51d0b3dc753c4a70819adf2f09cba43b22db697283b5a37635fb10f08d2e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170547 Malicious code in wulan-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35122b198300a446e333c58c850b7189fe449f21f2ce7e75b3261f2d7b5e500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156667 Malicious code in inufgi-gotauma-anafuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3a169d553c969022e35e706d737be148f1b4ac42dace0056bb4713e4511e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164771 Malicious code in rinto-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f366a35c79b62007d795df3130f0a7c25b6cbc53608c62ade5d5bad419fef7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-aluvabai-ayaabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ecca10df922c1992a12965bc85fb078265731793c5fc1140fcafd0726fbb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofurarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279866fb886113e34daf5c100b78fd6728513856fb180db91c5b1f51620a21c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9908d3b6807aa6802683038b0e6a878ba6e1c31c193683e1ff8d63c59042f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytadut-darifna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f4fdb185eb4f2a1437e2f9f0f24df6c50a035ad671f754d272c3d6b3d77134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofog-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1ca8aec5dfe304cbd21912b36fb18a8cd4cee6423f8d4d6fd5c5fe1b5422ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...