MAL-2025-152613 Malicious code in anaislah-paufalakai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b9b5efde15d0e8269a1e40ca34aab0fb148db8f5e62908047a77de53c0619a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152079 Malicious code in aji-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe623b03118ba48cad66773362f671c7a328f079843874878e6243697a7d9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160331 Malicious code in messi-nugtas-migtfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0206b8ce184e7429b00186bbaa90cdd265e2289e417717bfe33ce04568fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152019 Malicious code in air-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeec2df43935e58d49a8610b75298a729b6335789e95ce61330dadd5736c35c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162880 Malicious code in nokire-loklok28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea62e0cc7455dee74f65146da70bd663f1e59e9473d77b4d3b4b5cb12ff52451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiule-aamainiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3189984ae58752b88cdcff746f9f446529bfd1b81916c359bb6e3b16ea91b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4d8f190184330c5a4d663b50b9efc67aa7ac3797379bda102a0b4c18c96eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/kkgfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee26e8c49d38044d418a325770b29993e49845ff59e40b4afdc26b6405dc3a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-aa-ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f75231ed32b957af26a1d5ddd99dbfdfdd0b821cb9321db6960faa8f26ec7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-faog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089359707dba769b2db9a32e0950679973d786e7f296fc8df6a7ba52a1dcb770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46409f2624362cd22dc0b6c3e199b145740f44107656dcde90ceb834dc1800e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-unaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dbcb65007e17fc8845fd5020d17ae1a2d0a1aff9536b9eae834d1b4c0a5f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9fd0abc2291a207c491e3f13ac64c29c7393582f2b616a9f1337db4a1fe0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-jda-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7600ad4c46cca1afb9cc0b7d8d60b7852071f365bf51ac95718d21b8874082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a21c6d502b51fc79121a04303416815ff2be52349d62a0106318e9550b83345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02c2deb737a22afbf7459d910d1df6d5d5aaef337959a82c0eb78d773e00c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52931fc0b3223a761d7ee365700cb73c493a43ed2bc3fbba84d7e2608e1db49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f984f4cf2930e9ac81021563234bbe339c8079484bdc39d364d0edc6298f06e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26661d6205f601dd536298592589d6f511cf9e5e30e9004a1c3b93bc21b299ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-ganais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5230a93ee8462136ee17df17504e7815d7fb40e74dd960113c8810325115e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...