MAL-2025-160595 Malicious code in modirai-fia-jinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de941c70417368ddebb38db6e20d6ed64c028fc881ff8d6ffc717d63769fc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163407 Malicious code in nokire-sekiya2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e54cde46a7f32f323e5a02d48b29eac36fae684b94ad658c0a96cff9174b2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166060 Malicious code in slamet-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574e9139d8f80cdda0a44fe0704b66e3d0feffc8f84d223134f11d8298ac576a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160203 Malicious code in masiolan-of-doito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccba05b52155362dcb16b29f942cfb9959b533a95939f827e9feb4fc5813731f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160111 Malicious code in manus-tavauil-maoihbati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadce71bf08a4c3ecb6ef52187c77cc35ba2dd7b628d4b290cedbdbb7da507ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161876 Malicious code in nasrul-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e45f5b9441e2f477203ca45195042351b3110d57899b5b83ad6b7a11949a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169323 Malicious code in trevora-lliisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74f06dee5402dfca9bc43fb297ded9dc5f14c63fb82f160aa223ae15b238bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56a477b6ff38eb74f54d63eeadb490f2fbe8a506c6b4826590372bd0bfcd37b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef780c439876467449f7b72276ea978b634f37c9bec16a681585d854f5c04b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b8878cc3a3f33e73f1a499061233d75ce89054e7e5ed96195ee32d2af9fbc36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatafa-buaaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b162c8d5c3bc242f9d91be2e44c0b9962467fc0e638893e1fe77888933682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tu-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f378115957f8c26e496ef4f6831a08a42432fd1c69a7e0b0c60099ea1d1252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150733 Malicious code in @miptaa02/ijjc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781a1c1e48bca70add675a0bf78e3a899ef182cbce9d9772bb7941a0321bd5fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156249 Malicious code in ilang-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8af1a4cf1d638904160508a864179206bed5ea5e71adceb717a93d3cc26e4d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157148 Malicious code in jurss-cxdd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82e8662506aee41db867bf34a825af59c3bc7b7716aa8898f3918d439c29936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba38d4c8dfc78ab651908b5e03811d27c278b8c7225e7e276666e91693c3bddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155595 Malicious code in hafiz-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e65e8a5833bcff34678e2edfc08a029758562b81a3ef95d2e39524ee321208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/gfdudgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc4634611c21dab150c1937b29ad251c0301f11f4f070895ddd5967378481bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46f41fa14f6680856d0a4ba42541747e7d25bf107ee4fdcfc53dbd5fa4700d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163302 Malicious code in nokire-rara16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfba69bae657a49329c55cd2adbc568c411bf703f7ee5b32346a55c8eccfa5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...