MAL-2025-162912 Malicious code in nokire-loklok57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab8d22064efd273476737069cd3d2d7e7317780f6b520e6cf949172c00345c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164140 Malicious code in pilka-kalimasa-vubib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83885d84d2ea5338715dfbcd2bdff23359763cf28f31fafa4b22b35fec8123a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166429 Malicious code in sunderlan-ud-vanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5dfcab22a959410c0579677e9ff21e82b0a756dd5e8386557b2f2950e1c755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161400 Malicious code in nabuf-otgigaf-dajaffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022d89c220aec8f6e35a0a51fa825a91e61eeb5158db284112b6c9e560c469dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164895 Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163651 Malicious code in notasr-s-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e817fc2bf026336d4bec019426a87f1c936ae9a2d403cba28f07617e2f5637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155591 Malicious code in hafiz-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7871a08a6a1df505fb98299c714036569ce19bde8b3a0d9db735928cd405621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164002 Malicious code in parwo-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257fc20ce62730ba818f26debe29afa8dec1960a695c6638bf6ac4829fc6fe40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-ufufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68280ec25bc3134d30e84943bfe04c4e45bf200f767cde9e3e8dc6870eb8e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fe8ab992b184f06c98e1065bb0ebf38cc18525d9a8b38c34bddad2b14e3f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b483d23929e71cb3f354f6829526bbe410baa217ce2dd4ca5282b6f6ffb43728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86e1056c147236e6725d859239f714bc85003df1f9a63f9cb8bb1a4eedcebe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dbe643f71e1759ae0678e41f5ac800c61f8048d8221c85c1b45aff3fd34861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b88fc7e5278b92dc0cfc010d1271b1d3e4f2d66023866df517f44eaae67491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162897 Malicious code in nokire-loklok43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d64b75968bf32492fb9594af5d32be9471f0ffed9c953f6ba7ac7255097437a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161098 Malicious code in mutaus-mansis-nutayiropa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab0b53e76e32ea676daa7c7df4e95f185a6eafd7c5a1fd169117a15c2eccd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157153 Malicious code in jurss-dsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177587ee9a76ddda2d7b68b5fbc3bd94de5d4a572ad4d923f1a9bde9cc75f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b65e648798ef08cd8a3f044b3f2fb4221c7a145330321166b0f18734e9b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaadgg-musni-mifuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f111b0730d5fcd97f6c2e953fc512a82837ec792c7649970b2ccf2d46b868a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...