MAL-2025-163848 Malicious code in nudla-ofogfaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3056ebcac75b632f00d86851f07c659dde8d3e60e24f9efda9b26bb36f3734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159700 Malicious code in mans-manapa-riskifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37347539907ac4780e3999871c9e44951384f6e858297589ffcc139b0a50a506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158815 Malicious code in lookingan-namala98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084db87de43ebdf9c82496320258407726c7bee3360c901e21a277122068125c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166264 Malicious code in sunden-diak-nul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90045373851552cb0713ae3f20bef13867095e22d42d5818e845769cab99ce80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157697 Malicious code in kuinsnu-lkui-kagbdsasdgsdfdgdgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602b9ece1625d2571b4a39ba00cb3cdc6d8256e9b6d8616190c1006036f4c26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fogg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0373677652a59601784d0fd1f4c9bcaca9407d9badcc481dbfc04f94dacda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4a3e1a698adb00dbc8c43f3d90446eb9bb880b0664f4a09fc05958b085f76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amovugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63b553e64b0eaede8ff59e153df144f4eb1b23c27fa7291951283c635253def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac1d23b523b27246735a8b708c0f8217f59a78c24ce8367ebf14e1a4795fa77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee99375a977857db76fd7bdadc3ad615de3e08ed32ab0462030d4bc02ff45d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5dbb31c26f1aa481c96f77cd599aa9a56a8b28dd834aa0df1f57e7ba3cc6a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc292fb78f0c66c62a8c124d99f4d5a56ed0a528ecf99b40e11ed11f0451cca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c961df4bfd3d4423c418a696bd44cc05536336bf0025219d2ecab4d5c621023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b408404cf07398d91f0b59377a2333f95a275b210ba2b860f2ffbab2a8944ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3277bca32c912491791ac8aace9fba39b8a269e635f6d85bd3eb2d84afe31522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiua-smaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88c71c93f0e5be092115c98f5fbb225fee5c2ed0d0ebd56583fc2dd84cf5976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vapalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1f131b1b18f987965c8ad0c3fbbe872018eabdc69ad2855902b4978216e80e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5d8e56eb6b0f77bad69a6a3ab564e7008a4cb7fd1a0c5fe6da1d8d3577fb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744284ec4ab91291f6ce9c0aeeac04e5f5ca66102ad635b7c36f2a4f7e68b248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75728e94181341b044d6cf0845fc7dca166c40b954c16cbef42aa8a16c09ac86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...