MAL-2025-159839 Malicious code in mansila-tiala-moni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bc8961c4e4ac57bb038131a8b318c37ff384e508e2c9641a5922b381b5b963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169039 Malicious code in tehah-nutay-ko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256df9b9c7da58e8b2c1f9a9cae09f2f176b88c7c837514d8cba2410abc2584a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157018 Malicious code in jeep-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc0e03ca88988d4eece10594e095ad102a671db00f033a6b55c6ac50cda6e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160068 Malicious code in manurung-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b08cc8314c3ade92e6947f1f89b2a1ab509ae4b7e49f7972a971c5e1b6d0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151100 Malicious code in abang-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465c66d4832576a1134959da896475f4085c4c92e0ef7253bfc1b6c87bed3ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165651 Malicious code in saku-aiu-unianusiakmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f880525e15d7a25efaec6362e8934ad59095b91c1a08a951d7ca699a3ec296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-amuasubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b12a45cddb612d944b13842edd60af6a438a8c83fa3902a0cbd169d09466969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c932b29ccb104bce14381444d654edd80efb74f1919d95228a66b24fa87b738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-mew-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d10c15a05281e4313d4b1b918c32953ba2daaeca4d075243356ea8dd721947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff6380cde13a406696fe8594661170192697769ce6129f4d3178265c24984b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguamafi-agouabuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b94968892334c297ea2952d47a49baedd2aa6bd2934cd0fbfc616524f7af716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21c8bbd3711f03c813a402568cca4224df52e79592e5486744081de5e7cd0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec575788ca944ab54ffabf7765dd3dff2d84a21db75fe552facd6a39641cc6eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83d181d9bceb5770471b7cc0838edeb19c7e3d4382a4e6f48a7c5ea8672efac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dafana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90317c2983aa8763493c337377ee49680b21899d189fdfb85b29f5a19a07b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7510dfb20ef8c07856bf2375c08cb499eb09347eefc5b78db3d4649de8263a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c71d34ea6ebfb738ea71772acda8f3cd7ee2ba1cfa195abe92974b73b6ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idaduasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a129f4c877fc42bd61bcaa6adb7a58eb730e97b75be86973d02fe9d70146b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-oti-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09b6d3a1678be9102cadc83dca00cdad67315404a802892abc9b9897b936368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...