MAL-2025-157166 Malicious code in jurss-gaasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6092559de832ce7cc2cb815286902f39f9dde14405c7ed935ab0fe7aa1f5590f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150821 Malicious code in @miptaa02/mbape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1195723813c4fd9cb29b972f2d59169cd5543f520cf2a24e2aaad025bd63b239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151973 Malicious code in aibopuna-mobiple-amra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad741c9f9899bd75cb9b330ee1ea670c7b8f31a081a1ca5fb14a1fc9583be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165138 Malicious code in riyanto-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d712134482c7f972c54740b9ccd238a34224cabf3241c11a3985d2a5f50ecde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159854 Malicious code in mansila-tiola-mazoala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02b24670e62e10dcd27eae41cc4f9e7f0180abc3686b06652f304a80e0c4cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154606 Malicious code in dian-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2860c4261d300fc1a052fec276ba98ec52bca7e96a7c10d202de4b87fa30272c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157740 Malicious code in kuinsu-lubuki-viakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc216ff70452bffba6583ce7e8c3f20d90660e1ee29446d51ea10eb2dfd03296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhoupaia-jastfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad70023c45a59de62687449dbdae485498423a046471c0695d476a691502106e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-nangai-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4267ba4299f6dffeb7f4d9225cd3b5ab933bfd54b2cc9eef669c86448c1a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcd32ccf756c9ed5551e96f593500bd27e42a4c0fb4eae39c384d3975a58828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tuad-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c32b634da703612ffb5c736af2768fa920f7f2aa88f81e4834cab6bfddccc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-sfaa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662398b78c95d2b27b28055b2889cae102571054bb4b71af7d3315dee3f8213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154925 Malicious code in fadila-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d7a1bdddd5e12eb6b7449bd811298aedbdc47611c87d90529a80f63b28f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154740 Malicious code in dioalgo-klop-kalobaksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90ab3ce572da7a17da97f425f4c591f97f75661530a076b2e0b001a1b02d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sfga-trud-mutiar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 019fd420e4607db13a6bf8574c6716bfc36d51ee4c2c330a23109cda25e0437f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhoupaia-jasatyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478ce697d131189faddc7503cbee91c4fd1010c8b04d4fc24352d9b52ff1f4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manasipastdudr-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc6aace75389021d5939f7f426a88f64972fb341798f7ad8f1b5ff778cc7580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nomduai-mungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd53e95a297642073048aed37f83cb6991d523948efd17bde31335ddeebfc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d4b3251e6f7155f5b943fa8c924473ada2e1011b8315f247c8e2830f959c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2d3bb78ce37f26b01b91ee9f5555d50d682908c54eea84f46dc88edf5b25d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...