MAL-2025-160074 Malicious code in manurung-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daeaca892a34e89c3311fa25dab91079a773d0e0407f52e4787b61ff1654ddcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158520 Malicious code in lookingan-namakiki12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9643f1917dadf4fe37a725752743c33414f80c9d1cf2efa4412c7b7cc1980b46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159557 Malicious code in manaf-yuki-nuatsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add68c8ebbdd69776e43118631c8e7de83bd429ea51d27d9f2150a79d09c8aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170083 Malicious code in upa-lubalalio-igsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5952e2cd5a67b8a15c3f207cee7721b8593e38de1b36a3c6033ff793ee36827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160156 Malicious code in masako-males-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da7737199f724fb274338fb1c562c5773143251136224fed6d1d4844ea8019c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155626 Malicious code in hafiz-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b05fa5627a633d0a138b2596beb212ca92400f60478962708f6aa0a52f435a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166546 Malicious code in syahlan-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46523ac99f86d8bc30bc22fda846b03567c73db502087ae41bf09ab2bfc69e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165548 Malicious code in sabuni-nibia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e4485aedc782d60d999e6b7806efa27017d0064b72bafa12b41d87a99f3433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170210 Malicious code in uyau-tuyagudat-datut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5fc2130a0d3216b9b0b5f6a961e86f6e749ddea03befe3072837618981e2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musik-dait-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5345333170d823915e8b650dd3ba6878743d12947925b59b6c1dfc44f3e15c21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbb76acd95797a55e733db3a6341dc5350ebfce1af250e6cccc563c8dd5b04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-ifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600aee5ea2ebe0d4e83e68179f6d45632834954686fde6f94fd4aadd0a2a0cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-klp-kalouubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2737725f60a49620b3b2afc3d0f605cbb52426358bfd8199591e22adb969fe6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0caf0e5601d912a1af8f9a816436ce7d612534ffa0f05b60e3b3b2b2ede7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banbalikami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17c8ea75aaf214748563f2f557268929e91669abc05d9b55e22caa0c2e17740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24ebf8319dae1b453028a493fcce5683ad2d77488a8953bf7e961251c6b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fc457cccb891daaa6f180dc8f5ff3e419cd639afb078e99d01d6cc4f766f8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42277d7c7e46f9b5bc7a56f62c0378c88b2237b988ae45185f7f676f1b31bce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kgnuuanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b52df066757a96d407fd12f962fcbe4475f78a16d559dff0232a753a66f0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...