MAL-2025-159568 Malicious code in manapf-manuta-manssua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b0f8349d1986d09a4c35e69ffc886f4d130df0f31e846911166c4807ac4b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151518 Malicious code in abu-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd6a49686c6d94633eb14279cdd26d65efc915b20338ea6e6d6cc3082ca8e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157910 Malicious code in kupai-ukuta-joki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b03acff4aeb5571744c1edb08426d6519a2e6704e10b697d6a2f11f0a7ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3da1a563b6d5bdb59ebf89b44a5006ad7e1c81a26569d0db08a52b60906f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8957414e6ace8bba37d8c9299be76aebdfead50a672299dd7954a2ce06533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunuasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbae37e5285bc2dd976055fbdd028ce1d4d78f46f9f357e987549d7ff5afe3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2ee62221a0fafc26fccd4d1cb0b6e612a47eb0dd45f660fb93a67eea15a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malikalahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf95752b3d1e016b84e626dad5228ee8cb79a7e4f22f83aa816d59d5a8d44a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37719eca12b241b1bae04a15817676be50de75eef441a7fe0b37fc5ba5ac5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mifthusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922facf1aa658aa34c6fa83b588b3d02894405ff0cdd9d92df8b17f6d910479d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ksdaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5688e0f3d334b027f65eb69efe76ce416a37cac02c8f64a92dab5425f349c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogamian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edad86a024cfbcfd294d9c65783a7c10028d0c620e0c1bab3478fd612a6ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d72a6ced10c99818d88cbe8c732144aaa3c126e63a064571e8344762f1612f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157188 Malicious code in jurss-gsasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aeeb628005b052090342f06e52495b766e683ad29f73aa35cf8ea9b07c96dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...