MAL-2025-163006 Malicious code in nokire-nakala52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c933c249e35739b9541b31e957b54f2c241e771a40432b946c03ddcf8305b807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155088 Malicious code in finis-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ddb8f51db08d9f479588e0b7f0688a0b9e0f8a3d64fbe4910f2b286cdd33bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161606 Malicious code in nabuf-otoimban-igioamao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647a12ac6f2a3f65388d636582829cc5f2f26703fcc5eec9e843c3b4e011e6b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160690 Malicious code in modirai-igno-jinhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288752ad260c576cbc4bc5f91ebbdc9613ac970afb21c9b3fa553a4335100201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159180 Malicious code in makan-aiga-ifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd974d9e49ea498b87cfc41f393982097160e9a8a3a38c4df42241a8f2733e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159178 Malicious code in makan-aiga-fiufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490f8c3a2e7ab2e7c08d73b264d1ba093d0d8ea08aec97119578012192926f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fragagis-ogunada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c0834add9c457afa4ddbcb15f63b92ec58f404995b27b54c045fa179e78263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-bopaha-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f038b0a9a68090938b044246cceefbb1cd089dcd8141a905ab45e7c2608871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd4829f19a6085265cac95fd221ecbdb6ecf716d7dcbc71f01bac43a0859b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-losit-duliau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87497f557f2416e6f80541c3f3e83a497fa4198d08c64b616f3ab3e5b0c21927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e51150e7aad8babf3b625610a5a1c72822a08ea102495a3d5f9757ee80f90c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3acf9293a6c1670d9a98431e11283feac9655f89650dad28dbfc10976272e6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgaf-doigoafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406f901eab9787998e3c233812f0d1e4e0a1589449b61189b17929c2a10d280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2b7aa4271bbbed6a25134945f1458bce7930f8b3813eb6d491cebaf37ce8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in milraoa-miodp-muiokp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb924860afc40dbf8f30472af6a192c9051120fec89c551989c9c2dd654054bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/anul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2ec16d87f030a8f0700b7c79a7e0cef4226512148fe1da93c6164e155556f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bbe50f677409572b8fc314440d7a46dfe4c9a521521997e8038b624aaed1377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uofigapfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772b905e0599a163ae1e4aa9d0c4a0fe79bb168a896638979c4096b80cbe4d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e81db8634f71116ca486b53ae662de09fdb1761eea9a41d169e2a5fcebfb635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...