MAL-2025-158502 Malicious code in lookingan-nalako88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92ec2c54f1ee35138e9c6437b8008a2b3486caeb790646e32add2b9250e73b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162407 Malicious code in nokire-arhani9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e6902a7d636a1393819d821771ae351c28d527379c98b6542053a1af6f980a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166522 Malicious code in syahlan-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca17980e0546ffd615753902d9bac863adb90f4ad069307ebd0ba052c6a906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutafasai-aadsaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233c21a15980c85ff003f609d999f8ff3b3fd1353dee839e4408b8712ec4a72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mehanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1e5db46a5af95bcf858151158aae4142b0af996f33dd73b3ce8d685b8ae8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2442f2f96a68b7c42ff825ce5b6fdce320b2855116a5e34e14a91e16881192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigtga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca352f57a496b9722939e77e77a0cef1cb1ed118c28223a5b4057620281b0e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivalabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25b0b4e940c08a31a8e7df9ba3ed2c730a928a9ce7e3d2fe5d6f3a32ac4c19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67ee934a65dedc4c564c9371129ef111c64ce793a682bde0dddb0cb0a104fa2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3fc18a02084815ed4533cd534fa89520c626c793416ea26ebbac1ae9acf969 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ssafda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647ce8215c5816ee312e689ca6b2fd8a3491ca17d3f2017485daf11b971153f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d411b7734697e88f9f01fc8572d0d18510985bc304e3d43857a3701f8f5dd189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muy-mutfru-muytio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be034097eef67ec9fc7145850f4f54d4bee457730da4fe85ffc4489a014054a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nutyufafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7a1eeacb4b7e740cd812dd90b8f7ae1bd7af5d8d313120a02e71c95ba9e3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfaafu-dafuamfufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25b4348f9237bc689b0a993e99251f988ced25c5d63ca8cf8d31aa04903ec7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a047e250c50952fd59043c238fb7e62c35ba52747bbc771210e6917f6ab83a91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c44d176407d4da9e7089ffc57beac03e520f4b3605991078ccec31250d5b2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9460c8b135b4bfaaf1a37ee0c8bc7ef12be02fadb5f0a747fae08d803c7e4ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614facafc357a4df5d3932c2aab6b5a7660b7d7496700597ec3d654e72a4d3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...