MAL-2025-165591 Malicious code in saku-ai-upuasoanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2a9ceaacfa4a77641b2d804008213ae31397c9e607c2fee57f7b9ac0b2d07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150402 Malicious code in @mipta19/pjsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ea602958473dda077c635ffea20ccee84352755f8ee0c914abe99d64e3c413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156696 Malicious code in inufgi-gotuma-anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e16394583edb5288b946b5d00fc81bbda4a76f168e7944044d9965593d02924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d26a8f3be97a3844258c11570e57ee6a46100d063fad31528d767f2597cf2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6d4e0af50135a81086417029d10b0bb300aa8669f8650ce44c2f58c485bc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e803dae050f6543c61d95578329eb90f5cac60d91eef7f266cda58cd5d75e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-bisabyuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9fe7f53a205b339a8be7ad309af80f18714e32d69491929ffa34c6c9963358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed08f3494f589dc6e4893163fe2dec5a171b3961829146c787f1a1db8377a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3be180453d0776c76ad1822565aedd87ecb495c3957ac0ef5511a12e8815cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e46f485123338e5675e3a4456008a4518c5f45a239697c5cb28f46ff7957b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unofagoagi-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1930d7e3a0054fa514eda5f35b6073fcd64f8d48d7938c7bd7b142b9ac04627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62090f5c20287003d3b1cd7fdd4d593a897a78caa99c2a60886001023e5a0322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15addd26fbe44b17cfeb5add49064130103edaf44b92a021f0617261a7f97c69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a6563e26140c855cecc35b002125069ca0663f1d3987f8489444392911a05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167413 Malicious code in teagood-nalikami16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1497701c29ee8a90337719138410af2c4e5778f6b106f9e11f892fb2120256b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157682 Malicious code in kuinsnu-lki-kagbdsasoasddgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab530a028e928e066eca36fbc41dbb221a098806514f5d12994aee0b2ac454d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168934 Malicious code in tehaah-codfd-mut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc73805735fb6d8aed233b3cdf95697a663040559788093c4564c6d3127131f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159892 Malicious code in mansila-toaviala-madkio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d293af08f19f8d05f3735c3cb59e54a4d8ce6aafc51d95853b4d6cffb335d529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155530 Malicious code in gurs-mip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a8e0a18e7ef3ac2e08eba8134db543b6db6d8fa80e76c196bccfe208fe3bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...