MAL-2025-166488 Malicious code in sunderlan-uyud-vamukapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6347562da1aa1f5273ce3e5f8357c9588fffb5c64cab6fe221a2ac1edd07b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169038 Malicious code in tehah-nutawar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e463f134bfd7839ede8ab9d5ebff1713813875eb0a670dac7e935b2d3195e350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170106 Malicious code in upa-lubali-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f343a25e6699ff8ec30b399aaf4128da382d1feb6d46e1cfe699928d521fc9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7459b2c30df910917ba817cb582d246a74198eeea8a80dfdf0f847b5551ad601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161131 Malicious code in mutdaufs-musdadaiop-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7852bb343d1bb4371eebbe61640969adaf63689e69d5242275c06f37b554e450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152555 Malicious code in alvito-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e6c1906b96d8a37eb39d25664ba792e3ffc11b529298351605bdc9649a6a68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbin-nuyagad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e064e6713358fab1733add13025e008a43ea87d47042654140722261abc5180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-darusdall-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e3e65e374ee0939c68237de420366e4193e8cc2f06fc2dc4035f5efef8e6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92147d8e6746facf1df0028de1136e70a111e9a32d845532c7b30d7b2a715615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b830634b2df594c1f81b18f028ceb789c93fa818ace3c827dac122c1c0364ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioloipe-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d161bac7bedcbe293b2cd6e4de648375252401b51451e03e4e4bc22103590b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uafaru-musa-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8957239cf6f83238d37e2dba38ae28f9d52297db3dc431c917800de5d79dc39a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c838dcea3e2ed6cbfb080ce63eebd1898a01e0a4576ee7c1bc298586444bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e095ee8b37d4fa17152da032824ad1d15a8576a726b7e5a1470963340c262c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5386219c203c7f978e01d05fe8dc6c9f28c6708a5519d81e1a95ca7688b9a176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-vei (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33f77f6d1e46688f45224139239dce5a5d72aca47a834a58305e06b1f300bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fags (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b71d950153fc3892d6408c1d386d81c441e9f3cb65bacea9d5c70f868e181a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ef79c66f92fe6da9cdc9457a2c0dadfa503b70dd8ea51cf8113745a7d02ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-mudipoap-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bed6c41a44e3702c9be1fcde5e84873b3750adde035d237d20f643fcc885dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2ac3939c180c79f3be22e23225f889589d20568284f12f6bf936614e54b655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...