MAL-2025-159364 Malicious code in manadsi-saf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1759ba106396cef71f65e97dc4b62baefca5634d488676f7a36316e7f0eab6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161635 Malicious code in nabuf-otoin-aiagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8931a138153188c25de19843fd4d7795372bbb6a5df891b1a2186a8ba799fa74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165442 Malicious code in sabua-muyago-dafaaiffuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338d5ac6267413e08fd88c59fcc14b793f31714fe91e1a6bf4f3ea8a34e30c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154508 Malicious code in diago-kulpo-kaipasinako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaca0df0be872cb403c453e927c3f81ffeddd9c05153f19cacf04fd195d6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155042 Malicious code in fauzi-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676c04d8ebb55cd7e512aae6cebec00a2a216a45a74b14b394401af2ea02d092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158869 Malicious code in lookingan-namalaka56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b186052f297d99b07e506c34366153427b29e2fadc393c371a70a63cea12133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156456 Malicious code in inal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b9aa620095b83524ac2959cb3233de61f728ec2766c272f309ae898a92db29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-maavwr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a430d28424ef77290b5813857ea81f138f65308270e06fe5910cdc03cdecbe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aecdabd2c955caca5c3e5e61a3dd5e8def41064d3f9266a91cc569f3dad4eb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153c67275750824a26b85661d1658b500f7713eee0bd9249c67691997d0cb48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikul-nionai-lausukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d0a057870c66dff8da5fcdb31b96c804c6ead9d93e17a96e5bc08822161fa5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamikam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d819e9d5dd696781aee358d11e893f9a92ae6c6d58634c6a49e137e322560415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-igau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebeb9d97ae07923b3ba0b8fedc6ed2ae065a10bf7960917a804870d849ff276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d7a32681176ee6a6773eac2ea8bdcf571a6b4604b0e35a1671f58c76db321d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616f779f0a8daa2e6a08f09e045bbbeaac32182e3b9015cd0d0341c5dce0ddc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da75e10dd0cd89123b8bbe65d67df9577b428c3d5a49696adcd8bff0e0afb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87158aa7da7d74b52e53e779e7a8499d939d0400499a2ef932ebd9ae08ec8a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigtaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dced38107b6d45f3e075ac789a2196114453991b0a23c8c83c52046d7f123631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25cfb9b41c153ac29d78e68ee284e85483dd349bc6e243dc3c2c6ccebd2519df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2870f4fe6cc7c0e95e8586f61dd89993b4e4b1cd21c91f713cb9fd13ac8784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...