MAL-2025-159111 Malicious code in mahnud-nofty-mutafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e166286267f983b65e1b872737cb6a2675a08f7a524f29d12f8f5cef82eda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155280 Malicious code in gifa-ot-uofifuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439739a72de184c51aa7c08e90e772f4026ce61e696049c52d102cda0026356a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152787 Malicious code in arif-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889a0d2105ad2225b5583469750198a2605b467e2e554c5b18d4ad616be2b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunubankasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d534c32faf9597feb22247d1385509f588f5c164369a2edebf86fba3e3124994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b3cb8ce5b43d6a63ec0c0c4ad71055ad82691140da66ff4fa7b96b721a6a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28f83a5d3e250f2899df0eeaaf6b48b9ea88cc115e7bd4d15a1a526e469e7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cfeaa8f317cff793547c388713b40fda37fc94a4cb2f139ec43a67d745a371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-afama-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5d6c9fbb5ae3d306196ab9466c20f4146936eb55ab86df8a48422894099a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce0b055e85253a8bcf3c09e21fbbf54e0f27580c8380df7127f60d4a182ad5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusata-bujiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 529d7126a8cfa2e79305d4f68f59d69bf0f6e1b2e747e073c14cada9e255453a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9ee62606e5622638f6b7ce5acf9b47dfe286e8f29ce9464049b7d39758eba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-otabauai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61696e7ae1aed4543a2d789e5f429269d2bced0e456803526c01788bcaed608f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a15c025e46662c20f9cef335d33322f57ab28f7b1b1643cfe26d98a0730f2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e2e9efa44bb7930d274fb65b10f0e77c909edbc87e02802737bbae9a1bf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faf30fe063422a7bd876384173c85492e1cd63d143be92d54bdf7f5572501b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5ddd822e7a1293e76c1bceab2c482585557038b39dcb9a35df10ed2515c12f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/riscde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6498d4f347e822263c674e76322ab7ba48fc58dfde2a528d299e10379a24ed97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutaigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee02ec1a551c2da0ab34ae8801aa79064d91cfff10982dd6e26f474f73f75eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12346ef1a7879f907358e256a50a2e1a7655d688b1adcf026af0c75c25983d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulio-luokuakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123789e064f86150c4195c9d9610f35f6e8f176cf123907bcd0e73812b1cc037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...