MAL-2025-162951 Malicious code in nokire-loklok92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c91f06d94c496a47ad9a068e32d8dcd1fbb877f5c6c57d9bc6699752a41e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170230 Malicious code in uyifiua-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81520b4ac758ea8cd6c0abdf77fa823e36fd11ddbb85ed21117baad312470153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168935 Malicious code in tehaah-codfd-muta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7d6eb19367e84f0cf3096a0169ae118e7fd7f38a95811d07b1583507802f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-majadidad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4232cb6b828ae10178ac7692a7f817767c3d81c2e203a391fae7b4c17ea7f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170566 Malicious code in wulan-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e121b35a787253d269f5ceffaa5dc7482bbf4a3e685b5efe960c8e60fae67f7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165715 Malicious code in samehada-saazs-r7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66817cd7397cfd42c3a2a39dd23211d52028daf8a3f14d6986f45aa0b7b6b445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantu-nadas-kagak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 077eb32b7ed5b626220919c057b6e478171c4c71a3d3c10b13d6a0c761f9a75c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avoanah-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f16ff0413789b46a5e494acf7394036facbf5ac93f3e715ac0f0d8c046246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasaaibalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5ecbec4a8390bb68df5baa351fea6e58cf4dd926f5737b97a6faa00b94635b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-maav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb00ad095693f59962db6908ba018201a793f0066b8df4be38fccd84ba7ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e611cce22e477277f5edff9f28b50559d1f89f7e736fe1ea33cb93957095b31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-gsd-a9as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8664a419cd08ea5745889c57ef9ff8c640aa96684953c336b1ecb00cfe17a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877684067dd1f950d3388ff6df509537ff7b3994734565efb44e2833f22d026a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulpo-kaipasno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324f9f967110a669dbc94aecaf7280d6bb93a25e5957b05a36576629e9dbaa35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nac-suck-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15dd2ab4e8bb559db76c412b3504ee6d882396694cf1bf6746aa0979d63845ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43745deaa9d5581484d4af8f84c90afef04492452ec6b172765cdf71fb72f3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2792b1cb5efec99b269ba259fb8876b511831f75ce6d24e8c7d700d7fc9a137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abang-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d516c299fa01c19c37df0ec79057567daeb2058785a7f51be65ac440c707b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed91e442e054db8912c77e3c6947492450233ef50ea6cfb5098146488d60ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf76116487af3c3d2a2fff74573a6e952a20f36e69fc5f81b0e5bb8ca0e1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...