MAL-2025-157334 Malicious code in kamasada-nusta-buaibdan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2b30574e894c2a07a67c4bdebad59987a7dcd475c9335c4c8fbea17dc4cb6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161915 Malicious code in nasrul-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c20f2023f2ddcf71e24e4232f849275dd53d1f453ead79722a086736f9f2663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alasisaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5eb9f5555cb0b84808eab0a177c755c0ac6aad788249effc6a32a906e22f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibuna-mobiuple-amziua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28b7d9585e0c117716ba273952f509f56400417b6e7d2ffa5ef4d61023674af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0e782cc702856ccfa1ddf892aed3e3b748c76bc09b758c9845d644c20b6df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f109af459ddaf81200b0555f43444d04b5722cb6f7745e34f86e5aa0b4b777e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioago-kamoi-alaliaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1743a73800e532e5cb4c1cc067ed4e3954a75c4060b30daf7c692a0117b46145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-maj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e04fa75c497f4644ad0f2b0ed7a72e6b346c5c3fc50d96fdec934fb1f65f2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2587631b62cabea229e880548e611156125478e843d85f556774fbe4c1d0c11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasik-daistv-bodot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf12080d71b234b251536eb7d6fb254d7f3d555305e0699bd32697e31204817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9080717d5b6bddef80e853ee34e800733f9225b58d081229de7115811cf1d91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-faa-sa7a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac243c61f524fd309b1873d5c1465006538b385685039cc3686783e905b833e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilkiaula-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68778ae4e5a020518d826226ee853ab07638a4cc192943cc8e599135dfc670d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b8c4da48df21dab544fdc11690ee3dac4e872aec3b6bd42e27f42f77882ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdf84b57b4bcdbde0af608fdbcd457c4fcb66f17493fc487a65049d183c3c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipppp/defhfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa58ae354bdb6e231cb7aab5727f0e34c4590738f9fe38a2d0fe30314157e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-ytu-nsama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1393ebd7487aaa8ae10303c8a6cc9d0dd31f28999d3f9fa1ba8b0add57dfccf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59ce15bb2a3372019c2f6adb8de1494935c43d3d372c9fbb5b993bb8642dbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160815 Malicious code in muklis-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c25e9b96f893d6198169476bd56b31a9b9495fc81e4d044913155bf8d62a74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165452 Malicious code in sabua-muyaig-bafufima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cdb63f47ec05cfe9780b1e1856042af52829fbf14194fc706dfb815ea088b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...