MAL-2025-161874 Malicious code in narai-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da91cb0a48ce8a74ab6006f40089ebd59022d776fd14048c3013431e7aa9c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156110 Malicious code in ilal-poke115 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430547b478fe7f4b6bad62059c1c06160adf0575a3fdcf1003a4b17f686d6528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170069 Malicious code in uinsu-technals-portalsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7920fbc4d4cd1e1410fd1b2c53df66c8ae06848bead9934e4cf76291511e46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154875 Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170491 Malicious code in verify-tayic-aibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca3c14d7d5d8787e5b0c3801e2348b95b4c3662ca9b35148f3527e54e653d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157870 Malicious code in kupa-lublio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1b505fd4e0ea37b011376e64b9c1b824604255c789af83eb9e31f004bcd231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150551 Malicious code in @miptaa02/bmb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717d0f628a5fc7ca2dd52069ae25ca92d7f25ca2ee541b81a3a631b777fa7396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166188 Malicious code in suharta-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dcc1d6c6a75284e9a5908d5275ad316de7564a0e4f8d24042d4a4f1c217809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167484 Malicious code in teagood-nalikami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fcc3381b5e68e5dba82ba7b15f4762584c5db8fadc54a339c095210a0e24814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150592 Malicious code in @miptaa02/etaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456faf6455c0cf8c25856679c212966ba8f647d4df9e459649f1cf0a9b2ea23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161476 Malicious code in nabuf-otimon-g0afigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 789f05829c2d5ae56c01da32da6050cbac3160272925bce10be5219b52972bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhufafyu-tadamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5eb5b9856a6152b96896581ed7e75b4b8f2b068b5fbd8ed6567b7a4096a32e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyaagfgitad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648d03b7a9527476cdd467950026273bf041fe037bcebf8305a18519f8d6dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-knal1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9417cce5cb2c9c581d3a15a6390918591472c99f695a8f3659f58d0eace1e1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-minaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 292aee4f3bf9e2536847f8d3c4c896aca62e3b220a3124fdf5230a89363b9ee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58d3d9db2d956fbb34dc1e09603e2728901a84b73c2cf6fd11d4f56eb55b2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52e4811d91e24eae0a78ff4a7fdd2e608ec6c5e7889a35b638bc1251025d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea4d9786efec27cd7e202580477c80cd37034d65eea14e5689a7e8b421d0231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18b4f1e78dab4e44a61e6dc933002fdb3313f392c583a7c0c6dd7c1479c9ffea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-upuasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0346ea9fc9bf9a0baf485ed36247a403470f12e0c66d2484901b23d40832fdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...