MAL-2025-152409 Malicious code in alita-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f3a2391ef64f988b44b53e7700b59ec9447adc152abf510b05f137db12bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165787 Malicious code in sau-nakiio-ups012uszgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89db817f180096e226980a6d375a20a8572b0585a7c889bd61f3fea705e4013d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159864 Malicious code in mansila-toafgviala-madasakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a3922a1ceb260528f089ff94957b39e5f5b566cfa02669b1fec7c127373d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansida-nomafdi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a968dd91562dbce45072380e709dc27ee1ab0e3845726b9e466ec2ea1d4e92c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-man-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d38953e59a9ec064c451347b051da397f15cb06c01bbaf35d9252e5b58bbbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ded3dd88e846496ec5f0563ce1532c8e4b4c6d040c837bb04918791eba9437bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752c6c0cdf538c9c64191e8bb54159e63e7f85aac8e3790ca144b306662f878e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-dfdhhjf-dffgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77463a736122937a4fb804d7af438b0ea506a41dc003d033e94057c30726127b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f64fcab049514f8432234d49e43015af379cc3f745fbe0104774c3fd234ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef75c25af343bbd18819b92dac03bc36783b5fd5446ecb713c840f06da865a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-buad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b54034548d6144a32a867690ff5042a61725f3092ab3e0170b6202560c963b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4c4572bcde591b64188689c58ad1538c376563467669878c558ab7aa9527a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kunal1ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d855dcaa0006e8fb0a1e682ab89b9a89e099dbb055b04e3fc6ba116d363b466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-cireh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f656c8df7a74e889c07901ada6bc34f7b8175d720a617dca58aee4bfa0a5eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aumaunnaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5070d121d275849e93f54e2f46c4274b668cb642f977f4181c65aae1653d1cf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avbai-ayubnia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ce28b9b174b9581f587231734f5d50e357fb904264d78b5381636b166ef719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160302 Malicious code in messi-buysa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487aa0b56711975b15f16b8382de878917368c377f3ca44239dd73fd14849164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155386 Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153495 Malicious code in avomainah-fragagis-ogunafoada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ece96345794cfad52ab5c8005441f75d5eccf630616342ddb3ee3d9875c843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161481 Malicious code in nabuf-otimon-g0gn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde3db965c45c00fe23e3d8218b8dd346db5e59fd74f04ad0d34d012805c9a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...