MAL-2025-157565 Malicious code in kentung-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e092b21ee79350d4a895f6cbb11b7c86d2045ea8bdddc213840c006583007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165220 Malicious code in ronaldowati-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e4dd2d89701895f36ad17ab756a2809f9d37933207c4c45c82d3522688ac73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160786 Malicious code in muda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff9e9d4cbc1bc255c669cc9d675e872c84eeb24143f33079573756ee84f41a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158408 Malicious code in lookingan-nakomi48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87c2f89de145b323b2b9bab36f23ec321ca59a4155a93e9926afb84d3ee5889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152411 Malicious code in alita-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b49499de10b5239771d05a6682fc471475d2b1b727477d4e5cb48ec2e92f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169187 Malicious code in trevora-cir132 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c58c67ba2e4f2a01198862fdfa3efdbd04e165cad5f435bede0638dab12ddff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162781 Malicious code in nokire-lokcek28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bc50acc9243fd3954d6f85370207803a314d486ed3a956ff204fb82fa79353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161608 Malicious code in nabuf-otoimban-igoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12ee620ae6951b2de3762449ed283c9fc7da0da9f1cd9c31d029e7be0fa06da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161410 Malicious code in nabuf-otgigaf-dofajggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617432e437415b6df8f802657fb6da9722975f4769d57fb516a62162470054cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00992ee8f9908e9a3a05f093d1a224eb297be4149c068eb6605da79dca0ec423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0758406c8a606956f646ef92edbba7b339422cee0c23db01355a2a606de6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd81ca33434c5bff2194adc8030d8f3c094791a6fe4ed9ed246555eed73fa201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-umot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbdfc1f843389feb1864e9ed26ab926c65b4ae4862bdde1fb8545706d173472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamkoi-alsioulima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eeedf9961893a15ad585a95c5eb092dc3d73043735300743132a900355226e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d8ca40dfd69f18bdda83d35d49c44802817e8c5a80e87511d4568725621515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3438999d078904b4caf40e3aee505956bb7d3226bd454b4592b33fc6178a8099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumayfe-naaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f51267fb948dc51023d86d729143c51507716cecb36c2ff35a9d6a6aec17420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e681304b3664835e8a2e56ed0cecf6bf36dfbe6b548832a9640963319b9e74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8366a894bf3abacb3fff7133e4502b4a5a05d3cdc8734ac170d1887b662d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adad3fa2f33a028abc3181d7e92af7eb512235251ae33debc624453ad6d3de5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...