MAL-2025-166404 Malicious code in sunderlan-ud-vaimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ea509e61fd8481f69bff8732fb37db5d957cf4c38b43be615cadb3e421bcc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdudfdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bc30bd25673af07313989ab47b6f2828f05e7ddedb978b1b1d3f4547df4049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157334 Malicious code in kamasada-nusta-buaibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b30574e894c2a07a67c4bdebad59987a7dcd475c9335c4c8fbea17dc4cb6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154040 Malicious code in cinta-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8b5618455c3eb214733087727d0a765dc2ffcaabd37b766dab36e39a9ec285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157513 Malicious code in kentung-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273e681c6ecdb00aed1f8f73fd1e0e412e6fcbce747a0007e3b82bfe5864e359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161055 Malicious code in musnisdr-terd-mpn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d98aac98f0981ead1d9e49c30e2907c41905d96ba0cec2ec5ce3b44ecd763f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157327 Malicious code in kamasada-nusata-bunjsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a7dce45db82401786f93a934ed9125a1746374353ac9fabf84ea6fd054d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164492 Malicious code in polymeria-butper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c140b1b7ac97b1f98a44e0b3c004ebc106c38c05ebcbad82863c01d8a05c8ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161124 Malicious code in mutdaufs-marimasa-deadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40b7042e19ccd70378771e8672b0005c16e7540c7f33b330da877e90e8f660e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161281 Malicious code in nabila-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d38b9ab314859b6a0b58fa7a6dcfc831ba228d570593464b3dac1fdc274c3dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156162 Malicious code in ilal-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c350ef9edca6e4577ba3a7a3af97bfdc483a59c72dabdb70745539ffdd4965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157890 Malicious code in kupai-lukuta-joalbiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd0fe82ea5272a7a5efd49d6502a1034bc10abcaced43db8ddf5367af8cf99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153199 Malicious code in avminah-fagmas-digagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eba1e27236773881ca97f77709837ddbeaf39ebc224e0eb0363af7209aee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166248 Malicious code in sunden-diak-itarukn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f5fda6206013acf2a3cef300e11dfcdf2563de12d50f4284da890523990450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibiuba-uffai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ff0eccc6a5a5393325a123bddf1dc209a86bbd54b6ac81a5fd6a4824e11b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/jzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74751c07619ab82b88e50f90eb7a863f0a46b54d44127a3eb9f04acc197229e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-avi-aumaunnaaata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9625cabb4d4eecbaa618205a984ac0a1c050a287f4d366a71bb2a90017dc7480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3fb9b958f356b28bb57ecf6cd03b8b55f3936343b1ef3c06a7b67e9dfb8c0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-miss-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a09a93611d5e4e6ef96574356f2e84196488c2f846540f7932a60655201e81d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-ytu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd6b3a15c3715edfc8a67ed242e91ef6de5bdd75f1bf0255186dd2f38894fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...