MAL-2025-159044 Malicious code in mahnud-magu-naikafufam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f667ef8237e5b317f5e288865d2ae40158795a387161c808799cf3d539a8d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159804 Malicious code in mansila-tfla-magolani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b533f2aed5ab79d9f45dc23b73606fe290cf0e273662c13aa7a7bc594087ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160746 Malicious code in muda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ae43210f5a99fe7a2867c1f96ec5e4446ed357262114050278b1e97435e7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170479 Malicious code in verify-taic-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90667c6315c358a93c5dbab248f55c5318c97f3e4d07e0aa25d64853333b98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157178 Malicious code in jurss-gasd-as10as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e115af794b2394611505c7949e9641e6644fcbe1add0f10c40c46492b75f09aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165838 Malicious code in shilang-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7bc427de275675a5672c18504d9ba2c05d2193988802b909779c6e4aadd9d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafsfufi-nya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67cfff6f179f0d1d183f41e87f27e1b79601dcd57b0b5fc13a1bc1fb033260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800fa69e9140fc6f5da8632850e8fd2705b0b7319a4634ec3f418bc1caaa1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c902c46bf0c30784c829895af6845390fd646c7235a7bdbdd709ff24cb5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9ab65164331d95751cc3d4d7769d87415c0c1e5c1114ee968d2c0e44d13007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-jump-molecular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc7f6b7e102985148ad83d0c2855c1b5ef00d74ec0f8e4f58905a4d24c171d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ntaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8595dddabe65c7e45824d51f7abe499d52d80ade7522b580f5c41636c409d82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safadi-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3953f933fcd7e4a2a2f58af585d34108e848af22de0abeefee1d42e1ec47a28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-mehanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa1e5db46a5af95bcf858151158aae4142b0af996f33dd73b3ce8d685b8ae8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarug-miuafi-sut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8f651c32845468b00a6d96e85894c8395f6319bb958e7b63b9546e50445cb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d439e301005b39e6052dfcfc21e7d5e4b5a93f2015d4cd3d88e56cbe380fd08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gfsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d411b7734697e88f9f01fc8572d0d18510985bc304e3d43857a3701f8f5dd189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lulikonit-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e582710eaa0a202b8c72e5b5dd9e6ec6195aad7c47ae5744d2bb447b6fcdbd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-mindatas-buipenaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da89b3928f080cbcde72348ca4047d1935fec3e0d9509506126b6651172e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-aromagmno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2a67a3615e2d3a162f673505a3a30d1e4b1b344834a3cf606580d1c13f6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...