MAL-2025-176531 Malicious code in nokire-tanjiro42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7f1649027e4778ff8b5bae03311a094ef500932c52be08f0f3dc24391d1ad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173627 Malicious code in butanaih-asafui-datajhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b276dc0f8e1c4d86ca9701de4913118912bcc908b98a0cdb5c04cc65b2d076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apasih-led-pokiari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b6f747aadfde8cadde909f630ce4d92d1197b143a27283f5f64c2029b2afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171593 Malicious code in moonlitdreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56344ab150e20ab2da766096042b95c9409eb7569a22aee16df7d251b4f4c3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171701 Malicious code in orlaflynn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d6955a5b48728f4e3575138ffe3da03fb1a0d875a2825b6eab6b14deac0356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maqsoodabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 548bcd86a9d9e3aba08d711cadb77e023b35384ae571d8ad1a5e1925347a72af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171638 Malicious code in naumanafzalhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27088965b440f654fd04cae2bdba957acab435ded436aa12130fe45c46d90e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdd6c6aa977528d7278798336822ebd940adc4df13fb17cb3fb4e1f548cbd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipie-aramisimia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4e524d7d421ba1bc43e4074567a6d15a8eae59cb1fe791c27cb146fae6e7ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223c0e9c77acb0408971de6202d42477ecacbe8047865651376027b46ce10eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ddfff54a575766e3e2eb0bb3597770c2b779992d15955d80a43894e5446d2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akiualabnnuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7539f98dedd8d893d5474a08db19e0d9cedde3933f0e722b21192da88006ed1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1188e5c499f32156835402c7a307b3ac823c67f7134f8068e2043bd3a05e5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b20be01076828ebff2cc9fa513b6b1927d9430ebe0663592ef0f07d0607f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166980 Malicious code in teagood-lokina18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a4fc831dc28981c0b1ea8d67aa057e6c1cfbacb08517c6239e1eb9304bce67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154786 Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158966 Malicious code in madan-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff44d9b66775314262e78a3bfe0a8e7b70ef19d430e40e903862c54a7ce4efb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152627 Malicious code in analsia-akifai-asuln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5852968d3adce53542b77900d14b9920f7018273755a868c9c4efc2df977c028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161198 Malicious code in na-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd71b0c92a64c87ffb47dac0dd7ef1300e9a4bd457725536cd386e9c23a9e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158031 Malicious code in layla-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49bf192347f5a0deb15cfc718fba696fda6ce7da226f743b262cc8d704195c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...