MAL-2025-165788 Malicious code in sau-nakiio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1064e4f5756187df74246aa401ce6f9d884efff7c6c10e157eafae6ab7d0cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156245 Malicious code in ilang-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a219904100f88938786ee1bddb80c74213fab1a102b8944c94ae63d8c31582b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159692 Malicious code in mans-manapa-nyura (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52de6f83e78eda3b6914ddff040e23fa6bd316c3f92b139de3fa4ce2adfc8b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152209 Malicious code in alfiansyah-pok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb976dd2eb0ac8a16f9653530c7fa6ced0cd8cd09c651e076a425e14a520345c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169228 Malicious code in trevora-cir34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63dd39901709edfea0b4786328740c8023ada1f806cce68c012b015017ecbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150672 Malicious code in @miptaa02/fshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2930924b90de23ef79484abf8e592c084d7858d17c94e1ebc05a12c5ae387d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157630 Malicious code in keyla-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da5aadd66d32bb3dfdeae37f6535467297dcb915776e3b13cecccecd5e35202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159806 Malicious code in mansila-thfla-magahboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4449acd7d3a57e2450bab6a91f4e52bb6335a89d97485d6c484553cf4eeced8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef33b0f18330280392e31bfe140840940f72662a8c8442c995ce0b36e4a35ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tuitetat-dutut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19936bfd973050a2af847ed26323387598233965c1596f904e194ce6fd247a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7ab788ccf7d030377efde3f8521f58044ffb1bb267a963a64170e3ac045c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afogsaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e05650fd6cfc33fa8be8a931fa231ada369c1173ca85bf4620c7d2e98df0fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470d5d3083492cb0bc9ad01a8c318aaf05020e38a74cfecf42e3178057a70212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaliu-nubulikvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d98ad5f11bbdbdbde1bc5518024466982232d2b355ec8595428b89f8e293ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b631e1cf8c6dde18ad75c45f89ae06fdc14bbf9700c37f56c76a551aba80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojafagagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f243a76957f714222810057a6802134785080ab2fb1e45853c37b50b7f861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unyu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead2b3b6bf48b4f395fd927a2d50688c72601dd783ff0a967b3600d18f0bf6ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7b8fecd187b11d2dc7fd6a3ba8d95eabbfa27a98d032ebe02df0f1e1f668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otimon-g0gnfmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b3e60f840d57b5fcfa89e3d6a64458c804c703657d9404a70f84e4e328db61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragis-ogudfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d264e863f1b881eb21a13237c30ed277585278ddc7f8652bed3edd6047d02c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...