MAL-2025-170515 Malicious code in verify-ticaul-bisuaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c457073b746fcfb8ab2d562c1e811e21c63f686d9d663d182c4827ba70212a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdecb844830d7a78a26627cbd1e7d66fd7770c574c9f69a706f63ffd962db9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491cff21f8ce0311879a1be5c12447043e7cad8dbdd82b08d85e56e2c94cb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vakumakuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94744532e1e00c32ebeaa5abd417f6be85efafadf952b8c821b17443db90153 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uofigafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daed5ef28fb11d9e25a4410df9f457b419e8d75d9d3f373cd16228cbf7d0ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159316 Malicious code in manadi-scaisor-dadfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06dd983a67da0bd5d05b166289dfd979dc166237c694dbac079f73e36b324c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169135 Malicious code in toyota-cir15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39220b9136fde5c10b22612b256147f53e211ae4877504b049953b779831efb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162625 Malicious code in nokire-kilua37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c950df11ab4f279574d1fc171e75e1f32444a575e67ac31576bb1c27421328f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-alubbnina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601fbe92d28eb39f966e042f849a6b27affce0c385acd7d2a5973d18917f2b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-muaifopaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff6415eae915a8b8acd3cd398f012ec55d27b27c8f9eb4b23571fe98a784b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fsdjhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dc4988bb85a36b344cb6408839239661140bc573b979066222964a08a76693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namase-namuda-bakaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0db8b8ce6b9fc76c544915632bab6991816b31bc2f0d5c9f323ada9f373a4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toavila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2513a1b41bf9b842641d05bf1e46109922ecd20b02a234e53a4c3a7521ab6577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153603 Malicious code in ayuyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b480c825922b9e0898128a3d94dab43d85e43588cb6b42bc213a1b86a550e425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165955 Malicious code in siregar-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d960c87d258e85c0a39f477e9f56d5a1599109df67dcc13c1bc746f8d4c885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156817 Malicious code in iqbal-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f64c71fb51eb821fe7fd9d831cf7dcda7b4a63af671b445fb2b9307dfeaf60e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152794 Malicious code in arif-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935c9e4e014ee861b4881bbd15ed8b446122bd17e972497e9899f97630519750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169669 Malicious code in ucok-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d96671a5039840e661046443c107d9a0297150faf1c5b16fc90c4b6cd9285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160072 Malicious code in manurung-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec7cfb25fcd174234b5f4031cf4035b52c17a05ab30b55a4680d460d09fcad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159509 Malicious code in manaf-asin-nabsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de26b760fdeeae2980b3bf9064790525924d3f0136dc8f47cf409484d4aca234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...