MAL-2025-169805 Malicious code in uinsu-lis-dingkos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c3214d8988546b0f4bf8c4e64596443f8bfaf43087a1aa0a9f75e8a67312d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156039 Malicious code in icha-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832f3db1baf0881008378253723d32b7eaeb1611acba1c11577e458f614e08c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153240 Malicious code in avminah-fagnimas-iofagigaggiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e51e489093c975fabbb957d50d8b15f1fd2065b508bfd284f9561137f189817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165079 Malicious code in rival-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacb8eccc95e35791118f6b4145807e3a6deaa6e68e78a23431c91e4b6fe6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-foaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f357b296a941cdfc14cf6cb47a953f7005c20daae729ed5b89541835605a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74ab8e10a5ecebc361c0bcfcd6149f51a22bc302c8b280e695953b29f69da19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nar-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c457450e0f0dd69e4020f23b341f42c8efc462b69f63e4f41e6851f84780504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bufpani-mau-nama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47b1387ab8f464ae6c424827f2178bbdc9a4d34f5f466e446e88606fdd67228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-diewoggg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c947dcc5507ffd3e1e0d3a64b12101fbe1286a435a38751844b42829059c9865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivafifdda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07094dcd706cb1f7414d3e2166549fc76a2a8c151613658c69aa6a8754e4dcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhyu-tana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18a7da12878b8038eacf08b231dc67468cd5551ad693c46df1a2290244b6669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427913eba7f7ae6450e0bf8e1509a51fe8bf1e3e9c8c9557976904b6ef7038f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-musast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0eca39f3f5d5439c1e26d425ea03d1949b1b4b6095f366d33b837e5577c0af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fba029c8f94395a29474ad04f3ef7f1a54b05c57a5792f2181bd875104b59de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losiat-dik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607ca40db9617286de4a68e351a23476a220b1a8e9bcd8dbae69e454b045cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-ftfa-fdasuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ea6ad4df36e591588d7df625e81cfb50d7049ae883d1f49107ccf90e822056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212f47a4333bd2c49fffbc486ca47217decea0295d54cb76e0838fda2798a6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agfgagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934e793ed0e582d7456fc3e2e93cee51f848d31a72dc4896f1dd53915462eca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-miptah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a47700c34aefab9ad1704826fa4c76bf2196fecf69c96a4890219876a1b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ghds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0f85f74c1de5fa742996172e323def05f150e61dfd243a97190c7e5830576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...