MAL-2025-170504 Malicious code in verify-tayic-iamsunasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc01de84b873a8d7acf0a669e67f8a2cc88c5388526bef4d02bcb5616cda884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158492 Malicious code in lookingan-nalako79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28f592533a932d9feaecf82bfbc6e6150c8ec4c0b2b5373d060d0a5de4d0f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159073 Malicious code in mahnud-mau-nanaayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b04d32b02fde0c4293b500f7f54d3f19fec78aa5297b2b97165c135e48f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3157d282d8fb5f3674fc5ab9ecbdc2d12df4bb3651d74ea73f15dc9fe582f3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuda-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf5b86e62d614167e25f98d2e50479f5ea063e0091f3bef926784f949e2639d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-bisvuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8c59c40d7575f825c8f670593256fc6862163cc8da34f08122075f6027fa3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irassdhi-ssdss1s-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04b89c6d4ea59bd4feee59bac0fdf5fbfaae09d688f7c423edb53790fbf8bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilava-dakgrae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9466f48fd1251358d41345a742dfa52f1a86219d05751b4a092f5d0b257ecb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-fallen-widely (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7478d7aa0fe927f2707e9b859d06398bd0c0b0d7512e18d79ea9628a16ae6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gasasd-15s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1541fe161ebc2372724c04a92a8c10f896f8ebe623b619dc541cd2ce60a2f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a10a2424367be30f8a989c4f1629cdb257f764b0478b024f4efda9a1d0f4a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f823ae1a63f72c7867d85c5fe9277bfd8fcae63e25b258c96e1752ceed468c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-buysa-tytsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4330d813d8212678cea131a0d928a9df9cd9f15cf8c8b75ab2e1c0aba5ac0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0b27289c47e663c6eab7c4685244087cf49179c3d9a052691ae2b4e20078bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/reya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f555e866ee0ade359fb443b2f7caabbdb5371a108b5d758f614b4fe7b3f3600b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafifafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4de792e5f4366b80a5ed924cbd9ea1b8491a13af44a3dbb5012225d2b57130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalaulio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77878887dccdcef9a29d220183b57f62b98f26b47179160deffa9e412c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec22b0cb1d8f566bc4856b65db063c267fa92f2c7c8ec670e96724fb55ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-di-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2fa8d869149733e9e7fe1a481b2e42304ac86b36a9a56b951438fcd6fb5820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4a1ec97303841ceb2c238afd04ddce3434c47bd341f318fec7095ebf69639e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...