MAL-2025-168915 Malicious code in technical-aloni-tola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153be9d8dc3fc93bc9ef10cecbe0649e4e1a2730a793fe612078e117dd55aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159444 Malicious code in manadsi-sfda-mrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1b9dd34aa0e8f60b084226dee7aa749288fcb046f63a9b2ab1f4b0d68d49f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163521 Malicious code in nokire-zabuza32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daff58b3b51a1536c6204ba25769db67e8678e721795eb68fceda36ce4f5b8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155683 Malicious code in hariyono-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c694979c44163a214060815005ef946e7860d1671a05767f67e4bbaaae7ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-sdfaa-sa3a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18677e8794f2af07d5d33cdf904a1b521c5f792ea283447ea3c03978e130f056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaisor-ddr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40de8be2a84effe1a442fc4466fe17a5602350ee57b5c3a5deaa1caaa1fa9e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-agogasdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397bad7a5862a83f0c9b416b9e63c2cd1fab0d4b4c34b7b305ace4c00e1f6189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahfeg-nhahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5260dd13997ba1e0ccbee88da4140f81e5c3e0c820a6669e8b1f058c18d99610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd538cfc90a9bc1425f5e1f8ed010f3d9a5d4e5a3a00b09b9b0df285c40c466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abibua-mobn-atauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3abac34e8de0df268314c03e3c1ab473a62daba40ce718fe2d982d87f73e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-kalian-kontol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 500aca44002f98b4872326ec1175320832054c559c7d4a5f3eb7bc315acc7c46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09e60b78485dccff752f182ecc525e1b9305cc226257698884a7c14d17b737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7474835aaad8ff44c7a8e152a503f359cc4a1d0aa05ff0edd94133c4e4541f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92abb2acdf2477542fcecf5cf2773f3891928c64459b7790e1fe9c6666c16a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-muaicacf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48950636b86bdd34d31b1125e3acf75c58a886cfe27a07f994cf18c71a344dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce00aa5e929135a24880fb2f6d21779c097d5de804b37e311ff1d3db2a5aba04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170023 Malicious code in uinsu-loti-nalasaibalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78a943809daeba488a37971aaeefaefb9a58b656e44940fa07f6a6f5fd23c4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170559 Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153682 Malicious code in billa-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540b7deb534c5187281c52dd8412af3f388b63fda57f2c2d76cbeacd89e2426c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...