MAL-2025-171667 Malicious code in novalestari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b12149d77aaa4bdd36d1a0c0cf5fe6714895da9bc3f0a54e9487fd43c35179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dd5dd30f2f91c409496481abce17a0c64aaefc118d6a2c84315c3fc58db411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2f7a059cdb361ee7ed3e8b5dc4f125b7bfb676a199bcd0b0af198753ae4899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d703613bad2587583db3bdb037c2d65cb352b564a68623c3ffa1a451884e5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-list-patulimabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08dfcc70e613098fd062b79261dcf51b6a743fb3bbf45221bbd9a96ea43d079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dd737b0a8cad69d472573f79f790a918ecf585a96b3639b269491046692463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdfaar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88aacf54a0895ca7584dc409195a9b82ef49f88bb36e4d7cc6bb7d547a452f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156444 Malicious code in inal-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff80f75cfe7fea41fbabd3c9ca48a4219d4a31899f0528d66bf731ac320b63e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165613 Malicious code in saku-aiaku-unusiakaapmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81204d02403aba4895243f1b03c1cbedbffccc4cde1818a1700930f41f758b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bfee52b97b3eb63e913e68b411394996e88caeab6275479a7e9444b1094a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ca8df828c3367feba5348df7aac443e2969859564c4ee6f007477167e2e660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idat-ffgofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca2a51c79cd82197954b947855af03e74bf5df675515b5f3a90d9be7eab82fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3731eedd2a408433b3bb566bdd7fd10d837df875cf25636769877aa58b16d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd77fdb2aaeac05ede70bcb749e3a3d76961739bfc53fc016e3a253ad1f6c60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-0asds1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e942fe5779020c6b9fb9a33307009fde4576a6fe4eeee608441b8fed0bd285ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838ba09f0602d894251f18f35b2cdcb33aa5ae41869582210c5af23db848d88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad669b6085a79e1ff2f9920d09cd7a0177fc3ce85c7f218ae13814f8e50a4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59d851193e4f11b757853f5a4d18e801a36fa9ff12c934059e931b083502b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...