MAL-2025-157756 Malicious code in kuinsu-luki-kopanusntiumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26f8805d428a157f6f1e4389635c7af13784e6c20c2f9efca8b7cf8e028831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152993 Malicious code in astia-aloa-mafkol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38933ca48844451ee70e669e04e82270e101813146a782aee0be1f393b0e346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156657 Malicious code in inufgi-gotamaiva-jaanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a67a59f359369a5a08d649db92f435ea987833869cbd6c3fc851d5dab229d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe49e854047d1f9cc460fc59b51e74504c4704693d86d0cc424ac0abcc88f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d986b3ef44d955d6ab063251509cf6c2850e32f4adf7b9f3c55fe7ac33f5d10c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehaah-codfd-mutaari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe33c92afdab5e6741a4f875efcb7fcf4896530e4191403c5eac467df614222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudiffa-sayugf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6839476a3ddee8e876d5d62b138e37e4f23799af0ffc43c3dafa9511e5f4a366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b50e0fdd2324db8ad0e85ac118d8b2e352d23206977bcb2d07bfcfe0326377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamikaankalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf219e48a193d44bbf5338389e71a021e97477ba5979553475cb213e528de13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af894b6983258b98ce954312cde0652f23e30f2f21182de4bc03d5675a9aa313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2ee62221a0fafc26fccd4d1cb0b6e612a47eb0dd45f660fb93a67eea15a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37719eca12b241b1bae04a15817676be50de75eef441a7fe0b37fc5ba5ac5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bini-otaima-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3097d6973b257e39795f409d51dbc7acbdbe396e76536bdf698817aba709fca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akabaliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5865de3f4a5c595dee1ac2638ebed532c5a93eb8eb1cecfad4ff2bded9d9b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusagagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12278883a32f86e6fc32bb6e76ce442cd86bf962ddca1a4658afd51325e96ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897f0023f96620560667f0b39372968b021275738158578cfbe64bb452b26b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ksdaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5688e0f3d334b027f65eb69efe76ce416a37cac02c8f64a92dab5425f349c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...