MAL-2025-159197 Malicious code in makan-aigomoa-iutamafafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c2a5acceb5441fc54cba624b9e557ecdb8ffdf0d7ae978936b8bda5df73e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155539 Malicious code in gurs-muiog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e48cdb5a3a5e8cc2c0decfeaabfb130da9d3b40b0f90bb27f8a655db433d6b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161964 Malicious code in nasrul-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdd8ebfdd2e880c60334417a8d70aa5cbc420ff43a46f7cfc84aba93964f570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153833 Malicious code in bitha-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d73097ec80dc72e650492bc4448c8e027b41fe2c9ba8fb61a0dcce388e557b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155888 Malicious code in ican-poke111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cba5e6bc2940cf0bfb98ab476856c303351e0381a6943a1444e0064aa48a279f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160336 Malicious code in messi-sdubda-sdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975abcbaa1f057db3a7715b3c47d395287dccd5469c67623162cd045df96948a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163171 Malicious code in nokire-nana2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134a34bf91ec9cab35db3386290e0da8009401258080eedfc0cee96454b42bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166677 Malicious code in tadashi-tssu-ren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9597e5549857f09c0f7daf84d16c2b6683f293903a97f78ef1aede9341f0df10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151008 Malicious code in @miptaa02/wea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780c78b07547accf86d9aa772da84f35f6128d30b0ecc7ed1e42e18b377c7460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfaafu-dafuamfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b4348f9237bc689b0a993e99251f988ced25c5d63ca8cf8d31aa04903ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotama-jamanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58fcdef83836d5f1b93550bb3176e025ee785b5df92c5f9d37964593f11a8142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9cc578b359cbc3d657f8934e29a1026a9207b5e5b6763fa88faad682d0c4cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177b08717852b72f08f9b90695f6bcf494a899482d166f83454c1aef0422c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af81513b8b93e5ce73d308370b0e8f88e5b3cbdf30f2718b1f40afd74bcda07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc69c2b4c267352e3b02ebce0e3cafa8ea1b74d100358de3c31edfe2d606d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8496289c81ce27b027473de349ecdeaf3435aa7c4b264b2752e8beac172f697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-mobiule-aruio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e632fec6a2d168ef5510c92694ffe31acc1d07d194f56732974be84304e018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518723a17edd37f4c39a468744f3fc2d3f088d814ee94622aa63619343d73b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe737f785adf5f149965e8dcb042d524d4391117ae6c32f273ae13cb074a0d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...