MAL-2025-152318 Malicious code in alita-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bc5224644ac5c4fd4438e9b44b5a7e222abd641cd9d540928f27e8cedbf97f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153941 Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155293 Malicious code in gifa-ota-uoffo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fad71722f7a32340f9a80c35600a43c3f0b4bfae35bdd4c078c42020eca225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transfor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05a9ad01869ba3cc76576534440ce6938be87773769fd946b048d4ba099551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0845cbb2442ab1422c9ff819814680fa21e2318fa7a5a2fe2a56e7a0a48db25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-urat-ds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5532eefaa324d5d7ceb84f402c8dde8a6f251f6a584cf730360ec44089aba2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idasuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603b6592800bcf7e2815e932fdbf2f30227e8603058cf98c2eb2f22589005974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb92b2e1734eb7a69b1f102b452b668ee4f17d93e72499922bb083f616404941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli145 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52578d3353fc77dab6558d907be58b76c868c977b8a1c03a6f0864cd4d4126b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4169056fa8ab47b0f68bc6aee1517b7dddbbae114ca0d11fa522b8f666ea1ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911b89ee2f5174ea0c7ee3e29ea31f88e3b3eac85c013948ae106d64ff67e668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d98ad5f11bbdbdbde1bc5518024466982232d2b355ec8595428b89f8e293ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyaig-buafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242280f3daa39d4fd4c1dc1f5b859e5ebe71e2ba1aba0d4901103afbd3538a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lot-babiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10e398bf8ed1b57ea886aa3430f536ff13c0780295a3d5118b216dcf320f24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b9bb479e339668d64d5729b29aad677f0352dfe0bd2f7befecf99ecd2e1fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69cf3473a3c2fea337de42d835302e2e41440b3d92cd737e4ed5a073fb87b09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12f-dareagahuahaso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abc2eadbde7f463a35095b22d52003a7effd2de5996dde7817718850ebe7368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efadcb40a6f0036fe550ebc38f7067676ccbd2fe6c32d651e2214b2efc75581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-luki-kntuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3c720468613d93ef77ea3ef71c82f7e824d9678f0efe9dafebdb4e21335480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...