MAL-2025-153519 Malicious code in avomainah-fragis-ouda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61af3ab52b99b181963a589f178cbf924d3e9610e93e1e6d628528b6496b0a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160390 Malicious code in messi-urfat-dissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01336e8a301b28165d7343c2fbd50e79d65d8e5ba22c59e47665317077e948b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151917 Malicious code in aibona-moile-aromagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bdf50924a052a560ae0801c9e21040393348d81a05ad11031b234fc9a5556c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153755 Malicious code in bini-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3097d6973b257e39795f409d51dbc7acbdbe396e76536bdf698817aba709fca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160894 Malicious code in munir-man-nabfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e9138bc7316cdb846532d7482c24e1414602a0cde21ac2ef23a229f2d9fca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5cc8bf760973c0feafa69fda20560c014923cd340cbe8c3ef6d7c90f97853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec58f13a98d26d9b1e94f16ffe18f9652a310b3edc2d5f1936b1f0be2c5d268a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fed1470e22732fa58b8da959db1ec34a2cd47e635c7a4e13daf66efa227065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7461d16651442411e884d15aa547e9be793a270fa4ac5f7c3c90af7d06909b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a955b813632b1cb3b6f31e857bf833cf81a59e351eb30e407ce86b2d2823133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-muatigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da6a51503c77f50a6e3b854fe1d56a39e94363fedc6ee660d805376102fa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banavali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bf78c793688fb3c0ef5de4709413263a1aaa0c3f841ea410e33b1cc285649b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1069fa97ff0ebff41a8693247755604644aa1bf201117ec04e34396339d0a48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rtamyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013897a464f991475d0de33a9e6787a066e7ec91fe9b5e44d45b8de8110b16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6afbf1ceb2a6497a52a48e7559c8dd2794908cea3a78b33622b15e6ed6ec00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vma-nuagbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c913c12ff3b6a2d2bb78b77fb32d1240054b50aa7b8b2e8bfd4088a336cfa954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d394d63c9eee98f6c29f7c933adff89d5a921b18565bf2469029519851283bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224eef888fcf06a7e7e3a914d631a3c338b8488bce4997300a7ed47b3236e69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca41a7cd696622feb6071529ed1074a5d7e842aa64aaf12226214a6650587b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...