MAL-2025-159667 Malicious code in mans-manapa-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe8db28204bac08c8272e135e3649fd27ab42582ddead4a99f7a3206971bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151084 Malicious code in abang-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7258d46c444720c4543a1d77a7627189e03c313270279f38961d960ebdb552f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alabki-moif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7cbb99355c42fdb4403bab9c7807f1ef0bfc0a39a2d419b0dff275943aa9a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccac688ea291be37f9a452498d4f71c46391c515bbc31a0217a088eb063cee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150320 Malicious code in @mipta1/yisas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f214e16b3644a331989dc5930d73d71613641af3e149d7158871c4f32215e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154887 Malicious code in fadila-poke151 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e863812009a74e9569d88f4581d56514644211eb4abf7428c36ad711a78f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152661 Malicious code in andriani-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6457a0ec9330cee0c442225a80bf8573f2e21e75617d515b54b833360e7d07ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaasya-dgds-sds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969c958c342079f989e9df08cafb4212025ff4b1b18ebfb269b169d260a676f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5430418cf7739c57936c8cd23061dab862345e07b1e91610f8ca4d30f914a5d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-loiupomi-kilabarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d1b9c22c781a72b2bb991cb5bd77812d4d1089e59f847c78dcc79e4a6d81a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd95e0c2a71b40ecc2a65c34bc9cd71455c4e4b5ad60c5130b0f297f252a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nitroacer-teajaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000ab5e1dc60fc8d5ecc2e747a2c89ed86f2b066c74e2f83ecd1b85c674725fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-korea1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8acbb36ce7ac3fa20d31edd6c3ee48daabd87abd979f0e43061e4712fe465c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51e89d986914bdcdd560f4e212d3079ce58c7af8bc081a06b8e63c15897980b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151362 Malicious code in abina-amogoi-anuhuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e06943940963ebb199e31de269d6d2b0eb50ba4782003937bd563667282579c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164233 Malicious code in piluka-aluni-ipibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea438574b260f2af248b4cadc118d19e8938142ff1ab15a6e2796d148813aaa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164954 Malicious code in rita-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d095884c539343405bac5b43c4536f3f8ee133cf5d172d933bd8818b48ccf9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranfu-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928c767fb089b7752f392c35f9c0f7cbb7cfde5fec224acad074ed76390d2b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...