MAL-2025-156540 Malicious code in intan-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4435e1027ef909bd74bbf4b00fe9663c81dfd054f3d6f2e3b1148f08d7e7e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161541 Malicious code in nabuf-otmbian-isfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a28b9d366f862e7a0dc8b8fb351a0eb2a93def7b67eb3fb7f22bddc5c122e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166566 Malicious code in syahlan-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da351ba959ce2a568c7f72e68928788b6f2b1b63a81e1cc8446cbf8478f7e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170246 Malicious code in uyifiuza-iytdut-darifufana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08dccfc7a9c96998baa40867a507cacd4b87bd432683f15287091e4afb6e530d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164287 Malicious code in pitra-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ada670b12864c9f25e4cdd11f8ab0d19162a7398704bbf6e71eceed6a8ab47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e9b4d15bdd3a49fc002e537f38e6d4b327cf18603276d532d5e07e7550b23bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163385 Malicious code in nokire-rara91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d023b12a5cb9e7aa188dfaa31b93841850b20140d1c14aaa4a472bdf45ff78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sundean-udilasuinasak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9698228ac7218bf323a235156b464695f443f220274b86ff5d8ef82b63f5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161297 Malicious code in nabila-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7813bdb41a5bc0f984f70e85b86476d5324aacf0ba35a0ca15b9844eab03bcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9f495aecadb7619276246a675691adf2242c44deb135b2b9fd65687924d7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-abtdya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739ca6159a7ae2d86dceee0115d6435233f75afd355f1462020f4d5a13282410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vaklikanuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be4f104d7c4e43600922d6ca8074f9e772ad9f998171be168d37e43a83e0ac02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf226dfcb912fd7a1433d4de0e002f7bac98666517f3fe48c51efe0e63ea7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c400b3b1c17350263e3bf47d4804b88d833c51224f10b125a586f55b153f9615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sau-nakio-ups01iek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e369ff49df5c6997a31e32316ce0a169934e512d60cf200f739235c3a3f14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be74428f5e7f95508e10f20e65356b709be29e7ff37c84db4ed9ae276a49ad23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12paf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eafd807478cfa125d0df066b9f2c239a1fdd4bea11de8a208b19bbaed9ebe31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-pok15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7e62a54982774efb357ca436203e45a9685c54fa187c5439b8a50e3b4206d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151782 Malicious code in aciyudua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a1134fb4c05308b6b1a6849a68e810f03ac88fb8f413d26f022d60078c434af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...