MAL-2025-170180 Malicious code in uyafru-tuft-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920c539f07fea53c01d89fabfa3f56be88efca0032673f02a9d29c92c498d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166846 Malicious code in teagood-cuekin78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8b67e02f4449030bd2a7ebe066690248c640b513a65be39f6b80d9ee6331fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164307 Malicious code in pitra-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16fc50d930b6a0c4ab97f6c481df8c4d63bb208f6d4afbe1289dd470a95407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f01c0c68f7947d2df3de6b4deae67c3b64a7724d6d03cb1f051df3205df3f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aiun-misuanuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17bbf3893de1d4848a248bfa69a87fed300cc9606459f263bdefa40bc6b178a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170502 Malicious code in verify-tayic-iamsuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a514d4481141e8a14743e0603407679282d0e9695c188cffa49f5ccbdfd466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-doki-uikayananbuamabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7923815aa47563a32a2fbb636819220d712bb0fe461d43a6f21f0bc7a76a05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalaulio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77878887dccdcef9a29d220183b57f62b98f26b47179160deffa9e412c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-gaoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57da65aefd9d98d16716355ed415f9b55936f1706f5a483e41a4f45856ca3b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-manda-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7337a9495d75d26ad9ddea84f92ed98763b87fba1a94865ea92342e3fce1f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe89db9f3fe7b8afa057d3acde8b204a5fe62712f7c1b46190bf7acf2c63314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c107e07de1fc378445374e7dfbc1c925148c0285eaebd2d2ffeeb62b2452b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e21fb958b404af11b598adba2b6d551f764bdbfe8b697684a0906ab7459a30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591959f5d52fee529ba7ed7756bc15a9149adfddd73e257a84a286773153ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afat-usutafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61358a56ed027b3d5434356eaa324eae5eefaadc4c501a8e217229e3f5d9e74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4682f39f318473bccad3e644f2ed4f532d3749a89cc4b97acdc2996dffd5017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mayfag-trega-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bcec0ce30837ae96b7ad719f33e515fd8363647a538b7eb9f34341b09d02ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc971af2981f2ac5588a21d8b50fcb060928efaf1af0f04cbc285784d54d6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tpokd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da92de720d784beb450eb1beddcdb45b394823cd5554bfc7259736c8a444cddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...