MAL-2025-165432 Malicious code in sabua-muyafig-budfaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016372ea85888e0afa0ad32a7ad463b4927d266a4507433f10b6de1558151d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153907 Malicious code in buatf-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61ed9acb9bd6126969a0032ea6de3c3758973b89d5c4ea2dd6afcdd3f48eb9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169838 Malicious code in uinsu-lisa-atunma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d3f6543f147b3cf90024ced16d5829c434edc7c90ea7fdee88f5f035854298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169107 Malicious code in tehnah-nastaia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c751feb1c37f1166e33fb3623d2106fa8c78b9527f296d9b360d1c178e0c98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152178 Malicious code in akanabi-aibia-babu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05da10dd4983389274f7d071f9b5834f8567e68ea76af4bcc8b1e529a298af82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156001 Malicious code in icha-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68f2c7ba87c95595c06ab9753d4a8fbf860e27b12a1569857a357069fa6114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166325 Malicious code in sunden-dibuok-inui1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1ae41f31d4e314e3504c81985a34a36fb48cd7c188464d19df89457c204638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150246 Malicious code in @mipta1/sisup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c075f880e9197ec3dbccc352101aece7fb7f49812a1c9396bf7539b3d38632e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161019 Malicious code in musasiak-naik-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ecb37f77825d8a8e4294c9de53f3598293924a61a7b91f3c4c8a2b29c8d6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ab4d31588db947fb98a68d9cd9d3099c35524f4364363c2997c9ab1bb5303d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f8d55b1a2fb509d6eaa65f3c3cd9c47070c10c03b586cc4c323bafd1e22012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-uks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db23131ef3658eb1bf94a40373d258e217fd7324d2b12806bb5a1061bb2c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ddfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256ba81a08313f41dca4a8b718525045d71c2aec4c89d54ed01bf694735a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-gotvama-anbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af51ce55571093383fdfd4fafd75c12cecb03c33b9cc550b734f33baa853448e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragagis-ogunafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ece96345794cfad52ab5c8005441f75d5eccf630616342ddb3ee3d9875c843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wjgu1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9a3ad7dea920e0d9ca2e72312af752b7ab1d1456717cd9c44d888529719812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76558d63b5260f87c983c22e898b60e7ad327d5ccd11c631d14eb92dacab8900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ee7e704c961449bfc24fc14256deb7c8453c79dea600f997d21682ce9d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...