MAL-2025-151930 Malicious code in aibona-moilpe-arsiogo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397fed8136dfe4fec8b800b0061acdcd8c241f50c268b95934613e0923112cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166721 Malicious code in teaa-reborn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590b3452d71b683d6cc37e7c64bc478afa25ca505782778b5990dfcfec9f4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158314 Malicious code in lookingan-konami52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8815997a1644291f80d066eb3df5502d9ef1b0d02ac15cfc12492d9d68f0f1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163447 Malicious code in nokire-sekiya566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a015f96d5161bc35adf7b3dc5b4f1c65a4168d499105c97cdf0f7afe86a97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168945 Malicious code in tehah-baut-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fe6bc83e294f34daf83030b7bb2e76c5084bdde1a77a3942c62a84b266db96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153904 Malicious code in buatafa-btra-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbd7abbeaba75203e670731efb5a0ef24aeb2c555563cbe8f0491630c0eca915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165749 Malicious code in sanc-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb84707fca8e66e1176b7808e767c01b4b7de1070427c74cb5612d690cb7004e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b8780ad2998797b1b8da61d9a99696097a1120eedad274252c5292602adacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusagof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b9c2f4306d5346499d7df19e4570d7547f677a228817c198ea72d5b1425fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiuapa-mpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26450dfdc8bdbe4a34ba942ff99d2cc65cff5e3e83efa7377fb111adb68ade93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyau-dufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13513e7a224c8569dcd66bc246412586a421fa88c2f1df1292615de7916f848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-ofuarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13cdec0b8627eda9b56dcd8de53e85902f307ad937381d8729fcd8921a6e810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fe2f84973f8559536026074e50d1f27115f42b4bc8dcb9d8e345a53a02f53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab239ebd7a81477b0f4fab871deaf37e558da8dae009db1723fa4d227673028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82320730b739e3836ad1bd3b11cb9c200a6a32b753297334bf7c68b92b54e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91aec7b740ddd72a123fa2ae2797f47307f41b3ed67c3a9d1acef27b209fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/u-gffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3594707643940f72fa6edd909c778f0690305c8d1311101eb27a406e1e642a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotipmi-kilr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5e97da9c7df24511bba803af050c292339c6206634198a49df2f9a0a88c28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...