MAL-2025-170489 Malicious code in verify-taicuil-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff49dd21125d3edfc29e55013c4ef29d7b8becdefc800155f9ff13b4757b70eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162300 Malicious code in nokire-akaza83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7f1a80a1db36181b371ee25038abc1c7125046a99785af80f42f88952bd5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165525 Malicious code in sabudaaopa-muyafig-bufaufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd6db5c2553f82906b3bfdd0c2a5bca2ed359083d98b4122f3911c246075840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165059 Malicious code in rival-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27170950046e1b89157c4754977140083c9891e0618b711223a29e62af8800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169486 Malicious code in uaragia-mudia-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08770485893317cb4411d4dcc84b196807b6ed75d241e44aa4d32c3b16c8e898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168015 Malicious code in teagood-yakuza56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3e0c117e987a0cda082c6e9a2fbe7ec6887653eccd0bc1e1ea436a6807f1757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157362 Malicious code in kamasada-nutsai-aadsaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bc9b56ba4de2191594586054a8f201647533377e5f001b0ad00b650311ddd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161305 Malicious code in nabuf-ogaf-doifagako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a849e532f350e46e1e46c7c7663482787561e9cd015ae4bf06510815fb67a721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afif-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd02ae622dd3c7c1c110ffa7683444a08ee759876579f127162dc2c572f4472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b807f9fd61e2cb3e4d917ec078a39f743cb44d7869d9a43ad6a2313f506e780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafru-tufdt-darautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d63916710420697fbc0d5508eed5541a3e8f17979de30d3ab4429899257971b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07657f9f3a781c4bf5fcd7c2758744d1808657c20faab1d3c24dce8fb6a6ff35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966dad035e3afeef64989da370f2982764711d9a040a6c5fb6cf02fc553d960c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1ab3fb5298ea520cc94c2b245dc80925d645513a0278a64954f7cf7d4c5f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-upunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f461136313998aea87774c3744aa554e2e7b8ebda5a06268d8e588cc2b33506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogof-dufiot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef83a178058c679d8c67c72c9533a6475a7a36b944702ad49a8598aca473b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoi-ailas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cd29bc51669d9e3575efaf15990521a3cf7f243a8ca00ba26f702034850437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8b11a4b6e3e264f6b37a01025f92bb14de4418ea5d0d85f03e6cb4047eee73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1dec0a0169bc1d93ce4f852c39e899106f8aa02142cea27eb852e7e2ab1a482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...