MAL-2025-163252 Malicious code in nokire-nana93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eb4f49ce98ba1511b58950bbe3d8e081f7f97b024dac0b1c26c7d2939069db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madri-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbe6bdbc961876685f05176c53466df1eb16ec1c332dd7653d3d9e6bbdeb628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd9fd2ded300a84645abef264786296780f0667271ccd13205e312bf1eeaa26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a99821aeba211e06a0123d1d26c940b917b2fa01dc0f3a8fb6b8f83f0d1a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fb809b4793aa087e08c279bca8aca8e098b35265912ec35a96525daeaea7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d753304d6292f59cfdcf26fe6671134c9e5579915bb4072f8016415b133010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/uywu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c899a705138c6bdde90faff3fe9df314faa1b3131226298bf4fe503f71eba6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d95580a2f595dac524d828c8b55ddf9df9f3086e2aec84367877bb18fdc81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150679 Malicious code in @miptaa02/fvd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6fee15b24bbd3986d72d042ca00bbde23f70daec7a16d235ee0e3c360a15246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159979 Malicious code in manttu-rolsae-nuty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d904288dab2ea5513718f1425551b0576588a2ed66b1e07d87112caffbbc2fe4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fd9c9beb93a2f0241b2d372e78acba16bf2e0be4bcfe68c75211bb456359f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154172 Malicious code in dajouka-faa-sa8a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dd7c7b5b3202d650b6050def438a71f3792ba4375526d1a0f705a17279d737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154841 Malicious code in fadila-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0bd751666b2f23179ea4d9e2dc62013cad0fe7287b232952d343f91e7a1824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153539 Malicious code in avomainah-fras-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825ea9949aaed0b27e83b71a3c0eb18cd560bf4aa41ca271d98d77fe835e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167812 Malicious code in teagood-sukuna57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3ca895fef43c9ab70f55a08f40ad0e9a91d9d3c489009e3c9521537fd98f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165619 Malicious code in saku-aiaku-uui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bafb935217a730a7aac83e3f5ad6752b52151a0a5944ae8b85f727bcdb9e59a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158363 Malicious code in lookingan-konami97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f2ff5376d7b6a97cf1a07f9ccd50df3690d35d92133da15af7b6d83fdccc1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166061 Malicious code in slamet-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b417bdfb1c248a29920845b64012882ec0e6688dcc489a4ce9e4f3dc883f2e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169752 Malicious code in uinsnu-lotimi-kil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15001bf57731ea61b7be3f0165e4e9492465142a5fc6c9ca7faecba7357573de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...