MAL-2025-156280 Malicious code in ilop-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b415ab8fe2c59c58608086fcd907ea41b41cd51338b1c9a7631b2f98ca1d24b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161686 Malicious code in nabuf-otomaboin-nohkkjigau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce16d62cca70d092f228b8bc2902f6fe223af69450a68b9053d22030a47e729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156437 Malicious code in inal-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6f9fa61f8cc15c39486c3d76f12828a2910781fa9195d54735ffe5e2b8b7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/paso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3eaa2fb890fcfadd69a09dd2cde3ee9768c1122ed99a7fd190c971acc071fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc17b9663cdfd7e01f241e546c72dfadaf9034ce6ef59f6918548ff2a12acbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-dsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177587ee9a76ddda2d7b68b5fbc3bd94de5d4a572ad4d923f1a9bde9cc75f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-ofofiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c102ebd82fbb48675de94a56b993d94327841c9af5fe0979592a803752becb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902cffb8755d47a3a211e96492778e03a1adfd9d9c9f0a2278d9ffbe872ca4a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-ariafaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdd9d1c78123a631a4955352c9f3c691430faff2a97e90836e009a0a7887d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-goiaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e91deff312a8087e72eb184239fa2c8ca20f0d63035e85056d943f4b46a716e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa12a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6793a7994fa7d5fe691663604d0ae48dbe137c0e57b95f23e1cc9fde62eac37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticul-busa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3176226dda27cbec802cc638674e2e89025054777bfc9dc90d65aaf6d4eb7297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/nhssdida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1fa6df5b3348faadec217601e0cccc91b5722aa87bde7b114454bf6c56fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbecf560074c5d52e809fd273273bfa13b7fb60b5156e276e1742326822fda20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedada-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cba5649a63aa74893840c7b7ca29846060e350f2b64d6b529320185eb428d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a76db3e400ba25c87c3c95fee9c1cb5a34f10196fef72509a5c4a1ef57e367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d48b414bdcc0ebf9b5d786ba2230e38872a93b269c57a0ae03f053f146d980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanuni-ota-uauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a88c76c93c0b40b818cf30e05ca7db2f80587fcefd623fe2b6dacf9f2983776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunsilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cca0f85984fe9e20a710ef0cb97c03d4f5b6b74944408bdcac41b4fa07fab2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-nunag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c7dd1298e463063dfc6cfefe011ae7bca74ea1034d2dc6e301b0415602f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...