MAL-2025-163719 Malicious code in nudela-af-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edee3c364c3b8b3148a18ca457cdbb19d9855ea764df093f4e46ff0debe2d0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157886 Malicious code in kupai-lukta-joalbiki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7aa3989ecdceca611816c43720ce59967449810b2d5d1979c3e97d1edbbffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166115 Malicious code in slamet-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faabd6a842616b99973267ac54e63a2a08806a2f7b0a1ba0d03c8df50107b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152890 Malicious code in asd-nuttr-sssda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb46c94c2bafd5273e87086efe9d69ae6f031258319eb491675cd3ffee42338e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159111 Malicious code in mahnud-nofty-mutafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e166286267f983b65e1b872737cb6a2675a08f7a524f29d12f8f5cef82eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155280 Malicious code in gifa-ot-uofifuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439739a72de184c51aa7c08e90e772f4026ce61e696049c52d102cda0026356a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152787 Malicious code in arif-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889a0d2105ad2225b5583469750198a2605b467e2e554c5b18d4ad616be2b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunubankasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d534c32faf9597feb22247d1385509f588f5c164369a2edebf86fba3e3124994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b3cb8ce5b43d6a63ec0c0c4ad71055ad82691140da66ff4fa7b96b721a6a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28f83a5d3e250f2899df0eeaaf6b48b9ea88cc115e7bd4d15a1a526e469e7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cfeaa8f317cff793547c388713b40fda37fc94a4cb2f139ec43a67d745a371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-afama-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5d6c9fbb5ae3d306196ab9466c20f4146936eb55ab86df8a48422894099a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce0b055e85253a8bcf3c09e21fbbf54e0f27580c8380df7127f60d4a182ad5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusata-bujiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529d7126a8cfa2e79305d4f68f59d69bf0f6e1b2e747e073c14cada9e255453a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9ee62606e5622638f6b7ce5acf9b47dfe286e8f29ce9464049b7d39758eba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-otabauai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61696e7ae1aed4543a2d789e5f429269d2bced0e456803526c01788bcaed608f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a15c025e46662c20f9cef335d33322f57ab28f7b1b1643cfe26d98a0730f2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e2e9efa44bb7930d274fb65b10f0e77c909edbc87e02802737bbae9a1bf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faf30fe063422a7bd876384173c85492e1cd63d143be92d54bdf7f5572501b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5ddd822e7a1293e76c1bceab2c482585557038b39dcb9a35df10ed2515c12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...