MAL-2025-166359 Malicious code in sunden-udik-vakliau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ecb814980c06ab533077cc171144f1942e871b2bb382d80dc234782deeff3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157634 Malicious code in keyla-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a2e12185d9d306eace309013c1cf22409440626aa57f525d1b04344e803e9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159630 Malicious code in manda-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67fbe7a4f8b638084e2af409bab3d7f493f61d9b604d3158517d7514d27c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159063 Malicious code in mahnud-magu-nugrgaima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d733b405fe7c32c2cb7a30de8741d3940ceb8be7db9efaef94174303a6b2e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155206 Malicious code in fitrok-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6724a50800ddd6c4ddbf3c1c17becfba42a03eb2504a1bdf9a4019d7f6fc9ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560b972ae8c610e02be75a23ab46f8741e21a0aacbb9ca97960e9434e8220e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutsrio-muiko-nutay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bc03e00fbbd55d8f2fbf2f224a86b8a36eee9ff63ccded41d6a744cb839371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fras-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1240e06c635b48ac3403e4abd6f3fabe5c4be323d6ede35b92f8cb85bd9d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nameka6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d516e6bbddc780bfdabd628a457b02526d0c0bb203311d3c9e43517287fc062e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyillu-vilanun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9749c2b0ab9225d3fd7866332f17155c2e8237a989b6f044eda308eb0cb8313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-uks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db23131ef3658eb1bf94a40373d258e217fd7324d2b12806bb5a1061bb2c6b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luliui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc98b1f89dd8a1a98864038a6c003a40fb3379644fd26ad2cb8dc8cef17a8f39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ewihj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fac598f0a51f93e5a2fc731d1c65f3208e8bd55c2a2834c68ca2441b7ff8765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamgaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35ea09437e132919b00a44951c24a69145cd83a571c17f83c40fc2310eecfc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-aspsszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908d474b7790cd2dee5c7171440df3c21f20d996690aaad4fba1b94d94df494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26565aff183be9f8fc53a4e56140e54cff5690c48130ce70b1118ee00285316c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df692b5b8bd660001b29b8b806c589375a802da13544c884006f51eb3b1f8e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 172c6e9f43e9e959e72b528013ab464bfa311e14f70a0a154a318582e8420c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalalio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5952e2cd5a67b8a15c3f207cee7721b8593e38de1b36a3c6033ff793ee36827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ade17cc9b480f0488ed555cfdf9b014a9e63ee4643e3adb470ad818d15a60b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...