MAL-2025-164140 Malicious code in pilka-kalimasa-vubib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83885d84d2ea5338715dfbcd2bdff23359763cf28f31fafa4b22b35fec8123a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162274 Malicious code in nokire-akaza6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d2a40ed9f44b30ba1aaaf2d470047f6f9a74a5afb33c7d2168eb021325b650f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimau-unmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d6fdcaaf89a8367ba0b8082aa9f71fbb23c80fe71e106455f16163996a76a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155341 Malicious code in goodmanmax9250-neighborhood-egg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89527ef78445398e304270eede278f1881a85de134fd2efbdaecd103d5ac501e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166120 Malicious code in slamet-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f36c5cf9dda9b87706a5622d7200d62a827984b3eca5df457ca9cdc9e9851df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162725 Malicious code in nokire-kore37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85689dcfbb9ca928ce503de628f56ee8fea03db66db0757cdf37b4e1f051207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153722 Malicious code in billa-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bb7b55ae3cbd07c027db486292f4bda7f1191b87a3231f32c6dc65354a80d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153324 Malicious code in avminh-afagis-ifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d3985f3c430ac00c8a3cf229d12650efbe43fae9c770165880c63261a2dcc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161916 Malicious code in nasrul-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99690acfd7846f8831fefed11542546f3d4c5f6af61557cedae39c3b50e8e143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166147 Malicious code in suharta-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88a79afde432c5f1bd8107ae40e58a211f15b5ff335569356bd66c93c06294a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lisa-atukbmnma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3296431cd283e460fe5aa64b2d6298e06076423ddff9c594ea169a72e45a4463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-malas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845c294e5fc23ea7aac83dbc07e736f0566e17f452927e4617793c962648ee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454188a6c3bf63e07add569ecbdd750737d28298d532b71923fd509ee7e72238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ffc01715b09cb57337944e8ca2fa55df73662682bbafd3ec080383ef0db1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277c1560c84c002e674f5c18fc39fec41dd8b835a90237beaa302ff937607556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatfa-buaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a61d5fb58c646607c00e9aedbc5bd8a4947adc89c034c5dde2d9c4a24f277f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13319880cae03296b3c5c8320aaf8e397ff0373a195c6c9f79632499d1d2506a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d65f1878abe15737a771767056877cb4c6d3fa38ada50d1fa958095833b1371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fjgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b23cb3ecaa5afbbce6cf47869bebaba495a8591cf01b6c51f24e1ec7348edc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...