MAL-2025-165590 Malicious code in saku-ai-upuasoanio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31794e611169a91339df02a4a30040782774064d1ab90588e66e076b03031cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163624 Malicious code in nokire-zenitsu36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a7f1315af53d8b41b48cc7419c820521c2ab8aa432689d30daa43f1386ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158024 Malicious code in layla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745ca5b405dd3235a248750c3d0a5fcd0552a4aeec0e82e6f20c1804a3b34214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152881 Malicious code in aril-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaff9788645669070bd0d7f86d8c3a1e6c1beb3f05e8b4e4196ad3d873635b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153401 Malicious code in avminh-afgais-fafdosafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52162f730f34745434ac8d71da8e47dd364cc2edb03ab63afed62eba64a0565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155795 Malicious code in huda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c22def7c9da8701bce9b48ef0c8d03ff082fb3462958eb5255f0e08a0119c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167823 Malicious code in teagood-sukuna67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aab3dd297a27a04b758fe33e1bb2a555349dab80e205ea9c404e397f9a67b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd74fc51658866f1465c59d8e06fd970cc6a9383b2b9106310596f2dcbb3906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e145e72be5016bfaa9a53799215906a79c70ea169ec68a84b9fb487faf711b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ahfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0b33a5c0660839b7e6fdb73d2e325e85f2d7a74f03ef259d2395c034dac46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7caba44dfcd76905832522e43ac80921a79bd8093a960afd6219201a921930cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0d7bb81264e04ef60db836f214e6715344f5913389e527455435b5c87b853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5e0e43b9b4153ba214d06e01a54717dc8127ca7a763f82bfabbadd2bf4a2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofaf-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d0572ac04ef836f84ffba9b06a1c890ab24bbff0ff41a7f8e6126b393a4fa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b072dfc5c62bd12611390e8b503ba2c8717fec798c1f7540a021b5c028ba16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilv-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b83351afa5829c62ba83f43c3ee0d57cc18eb1ced8786edc78c2849700ee37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a80c8c9c7bd277a68203abae05bccbab756bbc07ed1a127fad94392c0c290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ajsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905395350e18305c2a0ca6bb1a7fb1e7e00f070bc6fa545eb72a0744efab3c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f89fc41f84d18c51ee0cdffc9b9d9a935908168198935ea7aa03f1b84d44c92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...