MAL-2025-161533 Malicious code in nabuf-otmbian-ifafonabogof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e3ec37abe9855873d871802d14ac68c5e8ec60014535c3f75c1a28ced4b7dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiafala-magollani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c09b060291887e8bba65739cff933e2fa1ce90f2e587f69737d8ac0fdf51d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-amaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf07d4add7903934483d4a865a7e4925b03388d4dece67d85d7a6cb75e2e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojaugdsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b23e3f9a2d835907d2b558ef8afe977aa4f19b0eb43eac326dfb865c57b676b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b5c4aa0e57f07ebf195184e8264ebabcd6a1740d105fd7de1c9920db992ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamoi-liumakuakoimo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d947b20a4c111111334a2d235e96c7c0724d69ebec310099acd3006a4858fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayca-amila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccae6f0fc802729631ea4898e3ba713ed79350e4e0b812cab677d463f68a8452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147506b8c5e5798f956df31d21df6e13821716f08f09118445d29a76bcba3844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunamlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb1246547284ca1625890907769e44d0eafd85dad8dcacd7676ebe7e11b24bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b1817122b987bbc1dc11a30c3e611b4a1a1e7c5a4e26f98d59bff713e96e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-arauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765c1f5a740abe17d80702d2efd25897a5f8ef295d7003806857a89d5dae026d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotipmi-kilarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057a19f45f515deff38eafe8648667c8c61d94043cbf06faeb43bfd6fcc6af7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sdss-tdessrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4144a5f34a478af95eca9d32282db16dd2be53f69d03e427512a6671b2c02f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4276b482b6c1d1bd6b28167388812ef047c9299d74d57e3ef70d396a82828101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0704cf026b52873cb4d7d18e676d466507bc757d75dc34dde9f1911359c4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5145924704244854388ea82f48bdda1b9560350b417c351bca00f4c0d43ab8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155701 Malicious code in hariyono-93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be68d408a361613411455fa92bea3fa908314162ccd52a1a24183f1e13e1a0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160691 Malicious code in modirai-igno-jinnagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e040f9ba04bde696e2243fda513007efa5f11e5465ec5b3b27499aa4afc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...