MAL-2025-161473 Malicious code in nabuf-otimn-gaoposig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a99c84dad2844f462fa20e3e6a89fba4a9be53f693deb93dfb2e81a025d7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156212 Malicious code in ilang-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b072419320cd950081d2653feff8051d06c9aa0b6eaf2b62ab6ee5dea3944e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167020 Malicious code in teagood-lokina54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420183c8e728fc572c869097f810ec5906eefbe93cc84feb4417c766c8948a04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153591 Malicious code in avomainah-fridaatft-fafuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2db4512a685ee281862c772ff06e998bcb640048477e833ba72625873d9227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150750 Malicious code in @miptaa02/irddsis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3107f42b75dedd2e26243f35490266958f8755f0adcf8b4d51fb729cd65c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuyata-buya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481c983233e7229f27c88d487d2f7246e9cf83ada12128281f2f1e6160e72063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9414a291d0219aa8f0af7821b75b3fd6b4c34fcf41dfe3e393d86d63cc309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-nuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00adb96b59c7b5d230842c058e4eabc84a3d46380f620e81229245f9e076d7d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29d2518400e56a04587ccefe93d6b060fa5f5da1a5a9c1acdce2743f3db3569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df1a001eb8781d8a540c582a7ea6586e00632e62ab5d87942d48eb60c342ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e144590e7a7064c85885c4715998397b994e79f5cb0a31b5c1f3418ebede225e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8dc1fa31b0247dc65e499049d20a543c48fff340559846c7e72b086b15e5e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048b58e3c6b4a4f05e6a6626ffc14ec218f2c6d2c31aedef79969a8ff29e516f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-marane-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0c7456f27782aff90168372de14100695a079f977bb035269638da07ec26c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-hissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3e17da27947b2982ec3ea235089d350f9e36f3b46bf3f394c833be0d401a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-nut-beligoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5659ce526888cf6c3f351501474128cac45ba09349d9b17d32a67b9ddd3086 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b3456d7f168037bbf26eea55118c48e61138c506eb212c03b6b017f919c9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-boy31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fac7f1b760a1cf6b56d2a91c1cd0d36fb642e97d159e680ab4adc54b9fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in san-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0867f20e57e95d18a83d2d7222b4dbbcc3cd3d8fa42ed65455f55f4a2becc37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f81e919c4bd4dd7f1ea7b876a3f0ad9b9c0357a1bc971fc92f0c5e8c8a849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...