MAL-2025-154532 Malicious code in dian-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a563f7c6791d179c73816eba10ff7e34e9086b9906d75171b26dbbc5d42903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165498 Malicious code in sabub-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdb89ad19b7fb104ac7b5c9157ed5723d4a509a7dc3f9aca0f012aa18257dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167693 Malicious code in teagood-namakai39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 188789a18c5d0a45036d968a2b4c3be33c60da6b832d9b7932c1602d3cba178f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161236 Malicious code in nabila-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e5d716524bc5a00d481decfda01aa1ba8b03ba79c7aa7d194eb5cbc722ace1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163582 Malicious code in nokire-zabuza88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f58a527ab795bc5db6210ed4a1240df3b23a7a959a7ea6b65392843d4f229f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151419 Malicious code in abina-mibiian-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e71002d6a0c914f17cffbdce59943e18d5f0fb07cb2b9ea8404264466459f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-nati-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013ab4cde22ba06491078b37121aaa17f333d79b4f63df77ddf975f55ed83294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-asin-nadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a43e6618b58009974d740536db4dc7ee05f9d768fd29a37811b105d25d643d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in samehada-zs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6edcffcf35209448ee5842eda57a5edb839d0bc6b0be49846517681154c9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luokkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce243d8daf5c048b8ccd870ca05ef68f887ff16aeadee391d0ddab2172b13acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ticaul-bisusaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26f78413359827c316d03c9c322a7c3bac119f21f1ccb6e96057fcdbe1736ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdcd97278b6983b19594d7db6022cabf39141c23bd65716fdb7a010f5f9301d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618650488eb55ee940f7cf0fe2478240c4105342a1f30316e4e5cf3f2186679e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf6e170c65b471e463fa9aa7411946b063c58c346244153df9b522d2a2e4b2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-nayad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56639235dbe17285306e28b33585ebbc3c093a0df280be60bbe7f6092574a288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agfkafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791c6ecc63a9431ce1a4f419198cff15af69d5807f28bc354eef004ebf382199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-3-mewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c03cbbd778dbeb7660757ac831ba4c8a7fc5c030c8d50b36518699e7ed4c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-masaako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d6a2f0c20d298fcd1f93a4c52692bb2dd9ec8696d844f05f50ebaa413c180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efcb67d3750e38164a85c2f391dd6d2438597a7fcd00b9b2452b76d8a0dbc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ed6293edbcd695669bac0bbd33a111945e83d9631efa8a18d31e44d9a8f5b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...