MAL-2025-169583 Malicious code in uarfug-mitu-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e111c5421e27746bdd13f0904c696f9b124bc673b23a13276808648428eb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155726 Malicious code in hariyono-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21a52b06cf174b3207f738e656d3d917ebd2e39d6781caf5a968fd0148ae5ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152079 Malicious code in aji-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe623b03118ba48cad66773362f671c7a328f079843874878e6243697a7d9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151950 Malicious code in aibopna-mobiule-aruiaani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7386e59f1138cbb75a31077fc537d2ed16718154c68b028b190335e85f1ffa25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154345 Malicious code in diago-kalop-kalosohabaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e7f59f45c3b729cc2da9c041d3862b5ff486659bb9d39da77db345a5ed4fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166209 Malicious code in suharta-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc3047d9391fb02bf9e44d81980dce6e3bf9dbd099b306bfad16c7b97c5f221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160331 Malicious code in messi-nugtas-migtfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0206b8ce184e7429b00186bbaa90cdd265e2289e417717bfe33ce04568fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef3c87bb4cab8744ad847fc934200c738e737d9ae3af1a0e1b387fd5518640d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamuli-lukakimavuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3777710bc15d25dc22005b8ee869feed0024c89be45baddbcbcd6b911d7e41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkgfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee26e8c49d38044d418a325770b29993e49845ff59e40b4afdc26b6405dc3a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilauka-kailbu-kluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67ebc4237ae26f8fe2263c44e68bd53344f632ffa5d4b1a119f04816978feba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akiuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277edc3a2d051f59e7e220d056c83a24e09cff3629e834270c83907fe3157cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aa-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f75231ed32b957af26a1d5ddd99dbfdfdd0b821cb9321db6960faa8f26ec7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f248572ae7a8645fdc2f791cf7746be03a880f1ce57cd1a60dd7697883bcbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ma-naik-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7aa2157e08d8cc350ef54df2cafbb0a0498ddf1282ca3d4fc28e9c96534edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c62fa017255b149c6fa4968a34f162037a2fe67247e2b1c12169cf832cc7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356125bbb5a0bab6de2363ee79f1b961414b8b7dc0ad452f401c088c482ed7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedariomda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1ab32bb89a2632b2b819dbd62c3acc32ebf9600dae5596a5b7a017bd46dad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f6b3d59aff9aed28818573e187006ccc7657f59499fdc10b22372296f736c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhay-tadufamafia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8768348ddab7eee8e8ac603e208de9a683daea21423fdeb8cdd040fb7a4dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...