MAL-2025-169045 Malicious code in tehah-nuty-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c52bae30aac38d6c372bae645b44b6aaa0d1d12443b1519e9ca66da1ec37ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150417 Malicious code in @mipta19/rykdie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce783c17d272e0f3d578e49323b11f679f5ed48c164281c68b1beff96b481e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b299d70ebc002cda4da0e84f5b265c63bad0f702d16c10abfa3d50c6cd4877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152485 Malicious code in alvira-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43edec0f9a295f18e1052e320f0636709c4e71a5d9aacd0f0b6ae3983b4ba260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150353 Malicious code in @mipta19/bacpas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d290d68b3ef3f965eb061ea87b182502f54a15f45a82ecd45d05a9ac6db2f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158955 Malicious code in madan-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af78c42791a13ae87fb2458d271a74dab658088183a1a199722ae7eaea1eee0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muyafig-budafauffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac05bd45a7c09124b73dd24610f99e6b0f2a7b1cc05d662134500c8d6e0eb1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153641 Malicious code in azhar-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e19e9ef3834858b66d6b3bd17ce8e06b52ab8dbe34975357b84ce427bac40b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-daana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076ec4caa6fc522143ef83b5756b2aa0c492941f9b396ff1cb05ee9be2a5ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tea-osss-tean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a9fb9f79dc13935b529b7735a778f415cef0b719f878c09a1a65717d78c9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotipmi-kilarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057a19f45f515deff38eafe8648667c8c61d94043cbf06faeb43bfd6fcc6af7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5cead48b9aeb5793eae0468d13b5a584f4d7122a5f5443732acee54fe871f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28dde05e5c2f1cfae893875dc0c01fe9147f8a3e698e23e012d0661254f5754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ee720c69fa2056196ea48943e5b0317113faea88a91aa80093430b90d5197c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tfla-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b533f2aed5ab79d9f45dc23b73606fe290cf0e273662c13aa7a7bc594087ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-rahafeg-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e820eb6ffa746e412386fd306315b6e23362fb1d2705f4de0eb0e4b31d4015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bbca743947d22086896201aa6df9bb73be275b6df96f56a70e24a030d3e5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd7077dec104d478e43cac8058c4070eacbdaaf3d6494c80ae09d63809df56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lki-kagbdsadgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac93ff93151bdf798ec1d07eeb17b3ab62eba73aede74fac75f39176f7651f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838a9cbcf0b15d988214952140cd041e2e407ad0c886631b70cbe140bead6496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...