MAL-2025-157565 Malicious code in kentung-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e092b21ee79350d4a895f6cbb11b7c86d2045ea8bdddc213840c006583007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161275 Malicious code in nabila-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25e7b5fe276f70245b67ca77753aaebca274ca02ee7a59fa9b91ddd50c42fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157645 Malicious code in keyla-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ea1bc8760d99e67bcae8c9c29e73b0a0c3befe9175ec8af0d529e1533e893f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150954 Malicious code in @miptaa02/stupid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907c8c425aee0e4000f13c6d10b66f0f5b7d20f963278774ef94765e182fff90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162166 Malicious code in nokire-abimanyu51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d5b217fb5b37c3a804577bcb1bb221dd0cca5031820007b186bb1f8fe6e7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152608 Malicious code in anaislah-pafai-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d844b21bd8247fb09b92df46302de390d3daf6d373ef6a0b91b43c602a217a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea4b40d82048e522b35c108635a7cff58f3cf1ec1f13295ea65aabb27ac87c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gurs-manusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15a67c393ae7f80f230060f0d3de18b4214d2bc83a1725c002db985df87ca63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyua-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff26e75d419057b4dc88d54a98a0f38acd88674348e045c41ec2b002c45ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qeuspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4de345c152848432cb53cc609bee2ea348d348749219204c3d1246c1d4d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aac4c2a85852f0e91c829d2bd72d230b363471f8c8933dd62b2c2da33f23a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ef2fda2b44d1c6484383d40ebf90a36bf011e4843d1c752f9006e9a9eadf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibanun-ota-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4e62629a437b1dcbe2e0a5193c4c835c8bb3a116640125f9965b9774128377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nualea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9da9afe5e170f04bffd3e595d27e14b44db6b6a8e92df99ddfc81987f386e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0844b1290bcd3eb9e6adbad66a7451204b87613a59595c60d119fa7bc9c582a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...