MAL-2025-169911 Malicious code in uinsu-losit-dauvu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddfb37989f3913773eb3a8ea87c3a8b1330cd5cfe3ba252cc910c9c51f3dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170537 Malicious code in wulan-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f26e1b87748da6dd1c8712558634925d6ab7c6f5e64cc41bb6ff3a8dc67ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150493 Malicious code in @miptaa02/ajyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d60c4a29c84fdb511f9698ebd0de2cbcdfda49117afc29b7e1b7f09777b8c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d4dd21c0c5ea1cbf2964384ba8a0f615f7a93432852dac79e2c6b3b689c529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutr-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e05da7515e648d113c624569277cd1bc98f3cabbbfbb0a8b87855bd06318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f49a2159ec9ed38a8dcc024f23b4ead5cc8734dcd6a3754d90e1714fa805e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioluan-ofamaini-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a648ab236d688fec627a39ddd6418c9bb1e4bab975bc558c5466d80f460524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee8cabe59e41ac15b1f7bc37e037d1aa6814f1449a7ac4dcad87662ed817502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9224c8177cac4e12e6b559806ff6eb760f8807ae471a6a82274b545c63014112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4607dda8829faa349656ae0bf5c6e9691b0b28de4743617fddd53fe8a261d276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmaas-adgiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baaea84afd5534008225115c1985353eb0ee69023a83a1ad4e6722c74723819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcdda1d1d325c9942503b53e1d04e12e0fdbb039cf5e5ff6e665b1579ab2392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-al12paf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eafd807478cfa125d0df066b9f2c239a1fdd4bea11de8a208b19bbaed9ebe31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudiffa-sayuguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf5a08412253df7dba9623ee1aa86b0da6a454c56c23ff915ef6e429025cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-aramiia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9495112b6388a85941fdfffb0e2f011a6c7ad10f9ef522c4bf51d32b11bc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aloni-tolai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf226dfcb912fd7a1433d4de0e002f7bac98666517f3fe48c51efe0e63ea7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536a173445fd98506f68d5b43597e336a8b7177d3a724e511a6218153fad687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alita-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b39f87afe1a759d3246ca7c714420474fdd3fe9740678625b1e9363b842240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderan-udilsisak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e7287a2024bf075557e601365e7a39974e55e05d9d21bc1932700e9d8782f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8159356b0d5e7b91f4e9f5b1df50cc35d1077f7cc95d89e1e225ad5de78b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...