MAL-2025-159839 Malicious code in mansila-tiala-moni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5bc8961c4e4ac57bb038131a8b318c37ff384e508e2c9641a5922b381b5b963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165704 Malicious code in salabunuli-nalikia-lusbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f570a7a1d8b8cb1c87feb95479e476292c57e8decd76f83f330d36d1818cc49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163953 Malicious code in pajero-cir6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad91cc7c8d4ab60f1aaa85fbf02410deac4594eed12b70730864ce4cfc67058f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149938 Malicious code in @mipta1/asarar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b0a963a4e6504bb71e5b53a299d38f4db61abb00134575ea384977e5ae8dce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47504eb77d20f576e916ef5388e0a2c25b8e18573e92341d1ced8d3d321b4af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0279e4826b751c955b768c0e465be769c3a86729ee54b042786c4e6694c8809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzmu-kijnuhigijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab7eb8bfab350ae000c3626543825a39e45a1efd94a55f5f1a5b030229bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-c-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afc886098199a31cc98ad8d4ff2f276329f82e07012c8b0cad40146d574b4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-pedadaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1490269c6db451bb05bed8428969e5a8a7b4ee1beb00a014e55f78ec50b45a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4864b55573d5ca384cf229736eb5ebf87e67f1bbe814c3ef713d07118ed63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinnaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840856f52d78d1517e1e1341574aaa89a6524016c26c5795f16685000421fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ae87e183c43a35ba9ebd01ab5c4cfd66bb5933b491c27bb6a3d5db7fe84bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragoias-ofatu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c061d5d60c9db85bb74505c88b2e14a8abf325e7fdc0f45a23cfb8612812b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-naki-upsidalue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f724686b1d74bdf614030eafb6921169e837676506a6c28d377a1d2d6cd24e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77ef71b81fbcecb38c85e474cedc0ff6c98fee62b2d83a4be5045a9735a42dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/rssosya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de59643cb3bfa319b374ca34e698ba13b18c91997a0732f2e66f0c3ad3c16f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156855 Malicious code in iqbal-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a77ceb9f596aa5c0d45d339c1226ec41b3ea59949b04a7e3895d08659d47c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156103 Malicious code in ilal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8dd85fb416f696654327028a8507a6450aecc2057af071a4d2ebe4a5758f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154779 Malicious code in ewa-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1649540998390e9eef7f2270c632437c1953e00b0bbd91c122090fe7ee26e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159900 Malicious code in mansioa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35578b6418c73830e3029341a797a3437559ab9b180fa48def2614989fb89806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...