MAL-2025-166492 Malicious code in sunderlan-uyud-vamunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12346ef1a7879f907358e256a50a2e1a7655d688b1adcf026af0c75c25983d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155446 Malicious code in guras-nutra-nutapasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81b2d863323065b4f912589924854c712f4936048d9d785c40038a2b0050ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156814 Malicious code in iqbal-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f49a896bb01e538c55db7aef26e0f2a66f2c8ba67f8806c83f7fd206278ba75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162166 Malicious code in nokire-abimanyu51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d5b217fb5b37c3a804577bcb1bb221dd0cca5031820007b186bb1f8fe6e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a6b4dec06390f9c5648ad78132030f7e53dfab60e50a27bec8697bb3da3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aae805180cbe28341f6cf24d16ef88f09e5a404725f9bcadd3417401e21ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6865b2a63696e95762bf9c786319a43ff86031520a5e69dd73b9d60f9413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadg-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13c8ca41cf2f103ee8d520d51d9844222a4cdc52bd9f45c3e26b80519b52bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-mutafafgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e0e4603a17e59ba2c00409592f8c9bfcae7a980be984655db4d0087f1de0ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe1671c8747fc0580d903be2091bb3568d82e2dd7034834c19c3b5e246ec28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8d5a2b46272c9b37f7bb1ae39bdc67c9cdc0bce7869e12d7475598c1c93043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gaasd-19s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc99b4e82d2093f9d0b898713d44d320490eb2057567023475623b1de361f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221c40d13c905a5c7492690a25e3f86f827ae5e00e91cb9323c51902d7c5b5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kilbrm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca78c0802a2947cb57f1280fa043c8f927bca11e53a8e37aa14be9788c156b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d5353690a33aa86aa0308213a1531915cbaa155fa3ab45d25b26fe04e765c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044d508dcadd0f2e8eef76158e1dfdcf8b6a7c0e4b40d89de9e66feeb81f11a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f5f3abb5a14b9e59260450a30bfcea214e676c1f643c5c862b8c6d58802e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suftiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d989813d1f5f08524c902513c3a30d6ce68ec67ca16ef5ce16dae215b40aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-daffm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60aac466aaf98cefec6ceb727e8572c2ec16dca77f064a7031fbbedaa2a4002e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...