MAL-2025-157749 Malicious code in kuinsu-luki-kntuomolagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3c720468613d93ef77ea3ef71c82f7e824d9678f0efe9dafebdb4e21335480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160022 Malicious code in manuk-nanai-ignu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd5ec3dea496345f01a30b723063332057811419c7b9e81c60ed6f288a5d342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160761 Malicious code in muda-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7063187be4cb9df2515bbdfb27ff33bc02eeb643337009dbc61f16449b6e8865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5938f6165a44455470b2f0b3e287fe2935c73474afb1de277447c8b7674de7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifa-tut-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3b32114a41e4c584fac7cd1d40479433e7444d9c1f4ebbb441f1c9ebf0ad96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-djyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31d4b3251e6f7155f5b943fa8c924473ada2e1011b8315f247c8e2830f959c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/iynujm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8dc8d6b589ad60b2489859ebaa21a4f7c7b4f814d2c491fc040b10eb5cf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderan-udilasuisak-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad4c76e095d71704cb7c54cd4340f4dda288c44097655a81a06b1cf65ed6c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68271b24261b6ab08ee3716d78b0fcf30a51b2461a57a4d4537707d23e85abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ae25b9bc88f839160f304692f2b06162bb31500c0a9c69c836ceb53247e570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rassasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1987150a291682ae767d99cd08fbb98adf49e5b0bfc408e8093cd99be9e68682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/resadx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3ba2b3ebb7055ec16592d0c86b149db64be19799be95256c450b2c0391d17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b228a231ade3f2349cf4184ac4731ba418565168aae99dbd414460d1bb21355a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880460aa2f09af6e9b591abbc48b933f496c0151d7dc3b7a021725a56c8d091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-nutyuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f89d2e25a2ff074fc853720e02afe45ff56166c0503699802e17512740bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a39e62db6a232acfc2756137a11a78de6ded64f135cd450433460d17484beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f596e825a9d8a7ea39890b3098f2f4a06710056d572d6b60a39b518536372d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd03c4dbe48ee3b5debf52480047ac9b9c05db847619649f8f1c15108bc9b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotma-anfzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a0d817c0d29e1d758aa3001efd4998a54c6896641d83f9a11d5b87b98e9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...