MAL-2025-162712 Malicious code in nokire-kore25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1814083bb806af34792adc285b1cff8a023326e2a9ebe06453993af313ea107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159087 Malicious code in mahnud-nofity-gonifga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb463ddf4373ddd098b033ad3307dfc40c6ee5543d08c9ca1bcc82ac814468ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152210 Malicious code in alfiansyah-pok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7e62a54982774efb357ca436203e45a9685c54fa187c5439b8a50e3b4206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luniu-kanuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3623d0b91612ce83c1cc563a9beafbacb452e27389cb9b7354df7ccb0a0d55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igamofgaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799d61fb8e6b77a24d4c60cb8daead29c3b7cb3fcdf55dd9037cfb8dea3490f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/pgfsa1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85f13f098e3ef3970f70a2ac6c446de999a0a2d5112b06460424e7cbdc2a9d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aviah-afbiafaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cca23544d93f1552e2e6834b0fbf88003f9c0f4794edbe3fd0c595e6ffd041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6375ea1c39202f54b938b0352534570f29979f0afc78f5dad38264e43cf15067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e32ed0e99a88d4199e52396a7983a641835d0734e49251740fca5376d5865d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/bount (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39df34cb47a4cc317573190ae078baa3e841cda41f451c1fc85cd3cc8a461e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99d318f68381326f46e767cd386e9786b921feb5147326d8bd87cef89cb8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kadlad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502f620247b9e1f8f4ee0f6284a74d35707b168a2a21d8db2a57077ee018c768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-naiman29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2a1d6c73ff3d003750f41be8d08d4301e03e84e917656978e744af69439bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb37a637434def3ac8bd5444bfcdac210324784022e5401836065c29d18f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7510dfb20ef8c07856bf2375c08cb499eb09347eefc5b78db3d4649de8263a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-got-constantly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d680401c19882055e21e2ce4c3682c2123aee431b85c41e396a81dc341e788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/hykg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9441bcd2970318dbfdb5465fb5ddb9b67a9d6ff6bfcd295e43d9c6d7a37fb53c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vuma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad1b22f8da427cb8cfe59bc7287aed95318eca2fe5450ce0301cc485b5000da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-aseaa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e64e187a3d3cdeb470165b045449fcfdb54e0d9d7490179cdb9912104ddedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 289e467f0f679cfddb2d3a0cdcab6538c80aa325be584e90b9be5dbd400f5a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...