MAL-2025-161091 Malicious code in mutaus-manis-nubliwas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b6e0381544a8af292c440dc8f7945b276e87d081071b1e7e88326f5fb9e2f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166916 Malicious code in teagood-lokika50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cfea582c226968e344aebc02571cbd7c77921992d7550126a2f1a665aa983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150364 Malicious code in @mipta19/g1mphser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b05d83ed1dc103f2eef575034ea875a076342e097dfc976e9987c0b268f6f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153750 Malicious code in billa-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f3e1b4ce57bf026ff9a4e8524a75746daa1904480e3ae7a893c88fd711613f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158826 Malicious code in lookingan-namalaka17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06d762795b586263f5ba74b5c572577ff66bff6795eddc280e6ff3458b8dda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166591 Malicious code in syahlan-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae19a67144bbcd9f547ed7406f97c5dba9f9868d76af600384bfa8edf3a87d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-somgaoi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140c6e3aa1b54cac11b91c87a0e8685f329111c2c969325ffff73e481ff88315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9de543802b16accc8a6dbd2acd731ff585785013a8e14d39242d8e82c81dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiala-mdfghfalani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668fe88cc29e363a0c048fe64ce385f321094a7fa0ef69f9575862a234701866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scior-radiant1243 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3241be979dc2cab0437b57d387d8e2954a670bc0e0178456abcdafb0b5f02df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-ujai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0c5a7341a4ec86ee18b3b69b386e64028696bb446055afc81a3bc7a7ace559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoamoa-iuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abea32302e1142058593ddda550633fc6df543c04a9eb2c3b81d576d15625f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-tsun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586068c849d7cdc09cac8e60726a1cd9d468bf1307aa6af3afa37db36c19746b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toaviala-madaoioibsao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33c19464374feb16495ea4a0d0a872627458fb4f2b97c0edd7633eecd6525b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7ff576679699f3aab3bd950ceb92ef6b63998346b1c9839833efb08d0004e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-list-ptul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5b445d931abe4418a838d61d3169bcb000c808686fc95aca82e4ab1982dd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a5503ca4215a104868eaf40f9a9cf21d44079e6194b88c2cf95f093182378 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a2cbe9ead5cea67cae7f19e0d32ce685b452e60dce0bd4806e1a7088e412d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilasoi-akiamako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12690c309477ab02f47d9719257a401368fcc5403f462e5cafa504e1c38ddd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d2a8fb38af5898ed4d194f72a8e4dcdc18a741b967e500859e7636116878e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...