MAL-2025-164506 Malicious code in prayoga-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b11f1294715e735728a4860ba6979cbff05a7dbf35f5dc972385148d2bf5007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153320 Malicious code in avminh-afagis-ifadahigaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1ace4ce531c2587235731f2f65b643d901c2d8833973e586ec0e3bad635a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163524 Malicious code in nokire-zabuza35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0697e5b20317b40ba0db68be975992275586e2d2c2c7f5ca06c7eb5ee3b2c222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150111 Malicious code in @mipta1/kszsofads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0555a4514d25df804884d1b6f1a488f11b71ce0a9fe574b00b4a21cb867e8803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160094 Malicious code in manurung-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66391e160104a53d22faeefa328f6969b5e6047d64a0f341805b7212d06444b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165808 Malicious code in savion-tusa-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1effe4697e5beb0766db0da6a8093a5da3bea90d8af3e28809bd673b91d2d857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nisubutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3db96661bd8052961abb876c121890433b5ebea05f45d94b9f86d150a181537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuni-nikamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0facd06f98306bd92b00961eee8416da88c7b839338bf494547a0bc565cdd70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b4201ca7aa78404432bfb0dd4d8ab509065817d33477d6e948bf27e8c1e8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec22b0cb1d8f566bc4856b65db063c267fa92f2c7c8ec670e96724fb55ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becc161ed93b8336d000321add1b0b42ff2dd0dc6be6b53c4bc829ed0765c4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bdc9410329eba8199d9106bed3a4242fb7394dc2113fe8e2bc9978250946b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3556d3480edad0653a8aba7acaa799ce63717fa918b62fee8697140b36eff49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugaat-daa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb0ddc22d9c5967e9c04ab458dff532c587cbf3d8c1f38a44bf40540963cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulio-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3748433f2a80450f9ca7c07836a291a00d022b55366bcf7f990cd345887abb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856fc2f9617d380ddac2c0e4f7c1b3f8121d8527cd0d332fd56af5afb88a983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6457dcafe7cc3e12d5efc0fca5055425085a274655c9905a6c2e0440fc4f965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyau-tuyagdat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2aeafaf91533e22542c10c56822e832131cd226752e01febe95257f41db0154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5cb3649236c5c49767b2d0a2e7f76bd0b2a77e7b7e364a7250ae83144a88b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...