MAL-2025-155528 Malicious code in gurs-masako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e375f0616908f780419541428f23ec6af02a5c6c0ee4ed424f904c6dd34464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164564 Malicious code in puteri-mintau-ps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaa3f1d7f00aa8b088c86f4e45d35eae409dc6f579649e06eddf65cb985c36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153791 Malicious code in bintang-tea41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a681a5d31ce2cbf9c9cfecd4c65b7b8c5a2efa3cd32eb2286087cee958cbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166395 Malicious code in sunderan-udilsisak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e7287a2024bf075557e601365e7a39974e55e05d9d21bc1932700e9d8782f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161306 Malicious code in nabuf-ogaf-doifako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcc4006fe89a406cb940984d193171b085028aae28f672b5e055aaee5331f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aadsaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93bc9b56ba4de2191594586054a8f201647533377e5f001b0ad00b650311ddd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-luiu-kanuaniniu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d926d522b6ad296e73298351bd72d62f44aa041169b0fbb7d5bca3f1824980df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-itarukinuyia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11727a3a22f2e84509b4a9fa12c0dedf7bf2ad7f5ff42c507ad8394565286a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluka-kali-bicupaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 080bc2b49399aa679dbac5bde1c6f40e45c954ee6d3e9d6105f9d7bfcd3d023f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufai-agopai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e8927247245eace2228ba497189740d911285d97cc40ba884f6e0da73323a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ujakaubaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a64a12bf4cb4c14a19a3c5f4a9f72e6b628a5109a30d26de07ae20a947f8ec43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835db2b590a3c848f2e7052e5b5e2410f1d50b63a142e2dde2dd3f04ee8f71bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-ifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600aee5ea2ebe0d4e83e68179f6d45632834954686fde6f94fd4aadd0a2a0cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-alusakilamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd535e79de27cc9e20bdd8b38cccf88b5514ed7ed34ef6717df1895af7237b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lukoki-nibutabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca74ef5a6105a3998e478fefb20f07cdacb4d757eb74e0993e23381ad346a0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 346b225c378f3d2a7f8db5265c91605b98a7393cceef713d22a51c31299b6023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68e5ddc367716a8f64268746e7d4d77bb767fcd9c0f86ae93d5533b294e790b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafaru-tuimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d2a4505932fe17130a6bba33a23f83ce7b33c06ff89dbec61bbcc9f0ef7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytdut-dana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8f488bbba7b111ed3fa75577713f770a48e28225ea68d397c6d1605f26d23a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6d4b4e2318eb60c954f00d6a9371c73e0a6d667bf1c35d804d08b2ae5f6711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...