MAL-2025-157539 Malicious code in kentung-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 147657fc5f3d50d0a9509e492f396dde6abd313d90ca74b476a3306f4b775df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157606 Malicious code in keyla-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f68004e30c7c695a6e122a44c2dd4cae04548606f283f30851979180e01caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153857 Malicious code in bitha-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121265b16089b80270e2973c43644944c4c196cab20550188116f23deb65a6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165451 Malicious code in sabua-muyaig-bafiuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25a0633c72e0e9062c4089aaeaee00db50bd9ee2c18ec87b412a04b91604169e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19074895c4dedbc23b6df3870db91fadc890524962e9303da8cc4fbb0a3b3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-mangah-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703d171b271ff48ed5c9ed6d720faeb1c1f0230c29aff7ba5cbee077b7b6b7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfc51e52ad652c69e80acc8c87d5ef2f285a287bb536fa66789881a0d6accb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kaboloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d8acee114296a1d12cd04c8ee933a38c5168b48ef8fa185a66b84261fe8086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44cdcb70810e767d8f2eaa6aaf77d1ac5f5b292a2916a2fe9afaa9f69ed27e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agutaibolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8333cab3d8f8cb97c23a4f12be7afeef237bc2beca3e7e27ea3332d1df0f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64411674ae14ac00b897a60b5215b811bafb4cfc0a4525ff785c0cf609b0b033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mibiian-auruyasta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc741b6175389a20938db817a3b4b8d83a86814846a2bd28586336ffc4f5e669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagaius-fofaguyafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd4cc4c5baa4a70a4ae2f9c488b220ea9219def95417172a6393bb939fc09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273e681c6ecdb00aed1f8f73fd1e0e412e6fcbce747a0007e3b82bfe5864e359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-taum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1dc4d50d5470bc8474db2c84d5fc96d6a8f76639530f3f405b36c7b3984307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotimi-knusilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10625dfbdb6b672e4fb8909d6fb4d117958742c7c43a9acc7e5a6be2f932d9b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8743a1dba8affeaaad05035977c36f79d9cca7ae500aade7294fb03a16c29f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b0cb71e35825dda9186306f12981f2f39204c98aff44acd03136e7341e929f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-albiko-tin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 608cc5a9f05227bfff30cbd34afd9d80737d1a499c286aa882615ee8ac0d0546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...