MAL-2025-156763 Malicious code in iomodra-foa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27479b91003b58c3cc19e898b8aa8a84fb439540ffef03401c32853dcb0060cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158944 Malicious code in mad-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934402f5d696e63647def889f526f5bb97b2e7b95ca299100a2007d127cfbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159568 Malicious code in manapf-manuta-manssua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b0f8349d1986d09a4c35e69ffc886f4d130df0f31e846911166c4807ac4b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee0243d094c2a1acbe61e67dee6d0d467bb4c639cd7994b287241fd70c433c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3da1a563b6d5bdb59ebf89b44a5006ad7e1c81a26569d0db08a52b60906f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8957414e6ace8bba37d8c9299be76aebdfead50a672299dd7954a2ce06533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kunuasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbae37e5285bc2dd976055fbdd028ce1d4d78f46f9f357e987549d7ff5afe3a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2ee62221a0fafc26fccd4d1cb0b6e612a47eb0dd45f660fb93a67eea15a849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sssaghafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b391d94e9e3b09542ffb697cfbe594ba09f7556e9874652e80b94b96aa3792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alaki-malikalahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf95752b3d1e016b84e626dad5228ee8cb79a7e4f22f83aa816d59d5a8d44a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafusfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90479de048ba8ca99432e50d380505f8a9debd7379920b0d647ffe8e9763019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37719eca12b241b1bae04a15817676be50de75eef441a7fe0b37fc5ba5ac5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mifthusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922facf1aa658aa34c6fa83b588b3d02894405ff0cdd9d92df8b17f6d910479d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ksdaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5688e0f3d334b027f65eb69efe76ce416a37cac02c8f64a92dab5425f349c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogamian-djau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87edad86a024cfbcfd294d9c65783a7c10028d0c620e0c1bab3478fd612a6ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d72a6ced10c99818d88cbe8c732144aaa3c126e63a064571e8344762f1612f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee05daba4167f8ec3889a96f867452156f0261035419a4adf32a16eb34e1665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...