MAL-2025-156221 Malicious code in ilang-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5f59f8a652242cfa7b01241f48013f1905c8e7af2824641e2deaf7e857c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159830 Malicious code in mansila-tiala-maonldzdodadgfuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83414864d8032d121bdbf779557b37971b3d3a2af70931e3ac403fde380b6331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166205 Malicious code in suharta-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b25d5770cce06320d5a28775a8484dae0391c26a519ccf26b54c0e5e2993857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151758 Malicious code in aciyua-idusut-dajajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02c2deb737a22afbf7459d910d1df6d5d5aaef337959a82c0eb78d773e00c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ae2343fa172595a84a748818182ab8939dc3e54c99fbc002518b364a629b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c88dab92de0ffd3a4fa5fe8653f8320544ecc17fed8b9082a0b20683e25e65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b869e9301d5aa3e4262da9416cdb7d1d1b416fa0e304a76c82b31fdcc476b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagangagaao-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb2a6a2fe838ea3b2051624fe9579a01e110461fb963274187e11b78ac45f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1cb9eb611f96384d2692c6848f6a62d3b3b0e75ad382876a6e301fa08e07fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47027f2c517e22bdf6d0af204dcf99061f12b5830fb92dc2ef17eced99a1015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badab01cac9dc2a5b1ee39402893bebef980fa5ad876d12dfd46c27eb83422ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52162f730f34745434ac8d71da8e47dd364cc2edb03ab63afed62eba64a0565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-nutayua-tufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94245973ceddbc1f2e02bd973df7cd403d64cead8fe5b497ba291e671db21ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09866bdfa45e78a9c24137e4f1b5e6b9f19886621df8e960d735881b5d79fba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomfafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a278ec05af3fdaf2c0dd56bdd5ddd04dce506ed8263dcd46648a030503dd96b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sfdassr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3289c28eecd88be6b766f382483455932febb65f92813548083ee64c08187c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-abunbia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2a9d3810cc3e0e23fbd0a358f6984260e401720ef6ee626909452a1689e61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nibnli-lauykia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed91b726a1d4b7355540cffdff26d26ec8cb6623ebe519e3871ed1ff3689c636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9e3a436da7c0e5801166d2ea02f9a0c7b71b0e56b2db4fc1e6a0657ab99468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nauyt-mutst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408746d380f5914a67a201d90e4a19f9f7924ca5a89a5a5e375584f08aa6e6ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...