MAL-2025-161378 Malicious code in nabuf-oguuof-dusuhaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe2dd56e92733260359449578b9dccd4b602baa171910434e3ce6732e8ef25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153582 Malicious code in avomainah-frauu-ofafq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3f4c27acf462e250c70a1df48a9bdb72e65ec4338b54c4f2f9bbf0f22210c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153078 Malicious code in avminah-fagias-dafafigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b85c2cbc702c3b424f198eb2378e137c2d1c9b8c947973124d0468ecdfa4d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151726 Malicious code in aciyua-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e53d5845f18cfb72156619ef2103f96ce8a94d1e075f3aaf97880cdf0b7261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be1e82993c9c6c7ec3ad0c2b9f450f90ff3211174eeb95e4542f3147e274595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 382d722435adbc78cb1ab592659860d0ea64e92df475b2c4163ba98fcf0b251d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikun-misika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a38d01cc0a98403148f2a1bb12d842e52ba441d69c1c35bd0d9beb38258ab22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e77e8703ca0019cf88c28ec730e5936bf4023c807b32849fec56fa8d50a1654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a891a6e90b7ff8443a72ad9279275c1158804594ae0add8f0115b88d28459fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/adahfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874e315be2cb8bb04dcb743e2890cc3c8a10df79795ab5a1e2907dc8afaea4af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoy-mutu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298c54e498ed37b8645ad524258a9b1b1eca2624ad98b13a25fb4cc936415a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aligufi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cefa73b7346c5995f1ab14e30c1d91c737d30c55c75d2000189b5573ec899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-mivafifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f585f2b38f8e873e5160124028376985461a29d92f05342e3f6b5964b954515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gobali-janulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfc27a04df0933fe4744c95c22b14ecfd8e54652fbaa14a91e4c2849e60ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8dc98f280aa1bc8144e6b8f49ebea4f843548cef3f3d38fcdc2c7d48a606a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1c45c7e52f9fc21e425c48e36be40756d7dd6320e8ecbe5655010f114046d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-midadaria (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847ba1944d68e1cbec4bfd91d9a8cdcbe55331231a59089609bcc50b403e88dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0ccf15b20f193d6e6047ce376a6bd1d5d572fbfe1c441d9086bc25f403caeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/easger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5996fb7b7bc849fffb7746f765a4d8da6d76b5bd9655a2881b682d2be56401a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...