MAL-2025-170266 Malicious code in verify-aikn-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aeb4a0146e30e52f07c6f7627d30233b9789e955f74401e4009e1717fcb7731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154701 Malicious code in dioalgo-kil-akio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3c300d45577f1b8419451de9a2a54e99e53a71ce5a8d6f31977aca189cb30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164097 Malicious code in pilau-akaviu-kionalabua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fedbc0de5ce9041c6c5539e3d1284ddc82ed8794396c390b4ae21345163d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158476 Malicious code in lookingan-nalako64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c11d62866ab6f9f0f5dc8b045b2923e42ba1650035815931f103d26818bb37e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153460 Malicious code in avminsah-afiigafmgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3dce2a165a1d92c913e6dc6bf13b223e04c17f5854425f5e439c6edef30c11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160721 Malicious code in modirai-igono-jiomigi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0cf633c78b5cb08fa085ce33c983011461c1754b55e938f3742756713389480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dassf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bea3ce897e008572a96d4214d11d7c118df44d0b50db6ff8e51524af9b39d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sifafafiama-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 237e5aa33d235c7bc3fd72d57cb63de13797d49d5bf1819c0023d17ddd991b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-byturaa-nafmigaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c599450ae24990e0e7e9e1c638f0984ec3ffcc9882938f119b785bc9348691da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agogasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397bad7a5862a83f0c9b416b9e63c2cd1fab0d4b4c34b7b305ace4c00e1f6189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202ad25067efa9a61d78e7faf19b877946c4f49e0f521f2980443df3193c0ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce02fdc20886b38a4bfdda6b569852a813869100a6a868f3fb1fdadc667f65b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b575a63970308183fa8c9aab32d07b37cfb009778510cf7271e3441fdee2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frasu-otau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9507248706c540bc4ec62c9410386e2e0ee7bbd818ae2f49fd802391a5ccfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-lukafhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796048fb315de96f5cf9646bedb3e5d27e6cffa7fa6805e5b762ae08263abf74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamukaabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4427903a5712893fd4ca5f66eb9e24a798f9cc33a0566f644f12fe35c2cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bd8f3f0267505cb93a58ebb0c7bf8d4aa2756d9a279fcb513c1e6aa0cf5a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kore9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820a403ef6d7a2666827d5d6b6febf12ec8ba169fd47262308fd64e77bc138b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amuymi-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0629beb3fb5e0c90d3e8056647555b86b5ac0cb08de3a00d27e284046b3d37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4e362c90ab10a07b739192a0bddfedf81748080221dd0327e918e17e4dcbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...