MAL-2025-168870 Malicious code in technical-alin-tubuknanal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819bc5200c3a25a46f8bba95d63aa24c5a66763b2e399fac59630fbe8235ae59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157894 Malicious code in kupai-luliko-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215cce17298ff84c60a80022b29b99e54ebb90052d242a69925fbbd5b1baab11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165899 Malicious code in shilang-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695921df7aafa6e3f8617204c29e5c95e4ab67e79c908c8a2746fe36322be947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167721 Malicious code in teagood-namakai64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639f6cc7e497a7dbc842f2b7e55940715cce7bd8b1b92981ed883ef5e9a20975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160653 Malicious code in modirai-igimao-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3591df27812ac86ec6b93eff91539d02df3211344e25032c0909a86415e28891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150851 Malicious code in @miptaa02/msda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd91cb98351519a06778ae6cfb651dcffe6d96c82cdda0bb4619ca0b14ba3102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162393 Malicious code in nokire-arhani77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1417d05c626e738a5cce698feda824eec42d9a2b44df9aca0b469a0b4856aee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165931 Malicious code in siregar-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392a666dd54efa39f6b9785e729ba8f9eec24f08c5b91ed647c259a184e7f9ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-dangers-fantma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47abea5b6b38e387b530cb2d65506963f03d3733a3885245e205bda3fc60669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19c15bfe05277da4eddb13944566d3d98959ed0912121a735d78d9ff3dfd505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90460faa25e9497ce6cdfe4e25d905ea01e957001f0ff2bf2800be7aeb9e9d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defba12be78d529bdd9565c6cafb43e497147fc0ee8cb3748737d74e3f2cfcad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86c88db16e6ee0d16cbcd2d910e08b232fbac861254458fd5a08cd84596d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-function-huge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b36ef2f7559e883a22526ad90748857254cc81ce36c869bdec54a44dacfcc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 477a2d13f6bc7150c2ffe794f1d59861f4ca973fb9cb7dd8aef9d4f0efc93849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796cc7d7f630112b08efde5e788c1bac8dab419523d36fc33a14985258036928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mantap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f20521cbceb786757794155840858514e87fdf4a40b80e9d5139267ccef2372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igamofgaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799d61fb8e6b77a24d4c60cb8daead29c3b7cb3fcdf55dd9037cfb8dea3490f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7f1a80a1db36181b371ee25038abc1c7125046a99785af80f42f88952bd5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440b0f33d3e2903f79608b4d26a07d0bc2bd5d2a37f450a1364ff527d7f880fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...