MAL-2025-156602 Malicious code in inufgi-goa-jamuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5f5f079cf2e9dfa06c143d01a37b802bdd3c3617e1943276b6e58615de2e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159281 Malicious code in man-nonatai-agami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964f30cd02920b034257f693df1230ae45db72f35dfcb2816e7465f8f4512cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163820 Malicious code in nudela-ofogifaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640686d6057e0f7cd97450c8d3d6a9ac960594b7590364d399e3fa0929ac62c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168515 Malicious code in tealove-nice36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328c1abf3cc40d309b6baa7d741722e78db19bb2fa0a6399bb723873cd2d092e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169959 Malicious code in uinsu-lot-babiunaakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b61bfe6f031e9da204f232462fe1284e7560f60efd34d3bc9b6cd4063673212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161051 Malicious code in musnisdr-terd-fhfh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05efef22b8a1c68872202a477de50f7ba431ca156d3b7a0215e35163ff742e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162063 Malicious code in nitaaus-nddyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca36917ee06b4ed2af3056650c537e673cee758ec8bf5d6cf18a1d5b8c3d734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162594 Malicious code in nokire-kilua1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb858f3953d31e6f1bdfb3320829aadd3b4f5b9971650f8a450068486fecf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152704 Malicious code in angin-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b8d1ebe5caf92d2d79750166bccc08738bdbf870df2b76d6468247c710273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7e2cf649158408be705b657a7e6e27c92cb90a12412fc3b4449c9fb2caa2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgipfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cae31d8b18b19e195baf3fe3bd2b06e5e759f065feb200f9e6c1ee4ad575ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-pedat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b41c74fb0d4d678e8013a5c1b3d90c73d0479d36c234c4b69a3aad19d25ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acaa7a429a6521fcaeed7c649f0d5c0fcbb3bf169fba09b3a824c33ec85932f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-dsdg-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0686a8c58c7255712699d6bbc4431f41285192834d5f89d4ccc3b8e2bb028ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafiaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758e08e22d46c68e7e0fee568a320f6f741e10061a3d952530a8c90615fb23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea4d9786efec27cd7e202580477c80cd37034d65eea14e5689a7e8b421d0231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a65dafec35da0abaac27893368df1bbc99aa718fa7100e5a2d1d5b900dc2df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munaroh-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e741832f98e18c8987f410cd496b93fdd4bd7519a958b61f602fda8e3ea0c17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatidra-goadaotda-nutdardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47e117c8f9de26eaa8effb6468fa0db9af5dce63a9491316b847f6eb0a027c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqwjgf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28cf3c2e1b032bac46bbb4d553b0b0379bc088b864a4c1bd99a2cba18dd4b0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...