MAL-2025-161697 Malicious code in nabuf-otomian-nsdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fb7f09786929186456774995186c7d94892ab148d9e708b0808d5204fdde9be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162640 Malicious code in nokire-kilua5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a5c6f0152d4d7f26a2952987fd734f37f2599119750e4ac606a1f2e2bac8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168837 Malicious code in technical-albiko-taban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53716edf2d66c99455c9ff8d558e508e8abcc7bf8f942ceb387f169252a47c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160117 Malicious code in manus-tavml-maosih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a9ab21cb629bb8ab6622dc766f711087c405b6cc65a532a29a2dcb0f285dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162626 Malicious code in nokire-kilua38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79ade438ee8e502ed9ea04b9af85823ac1dc62c85dc514c36cc005f179351c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162608 Malicious code in nokire-kilua21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9992b571e4993cda79856f3ef60c4cac92e135135186212ee02fa9e6f244d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165123 Malicious code in riyanto-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3a8c488566dea543440f631f560d6f0a47563b00e90cf9d2a458c350beb09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in san-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0867f20e57e95d18a83d2d7222b4dbbcc3cd3d8fa42ed65455f55f4a2becc37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-agoupai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b23aeede816a1c5b19f02162704ef51f417368fee98805c22b55941880b22d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-bakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2489a1181c9f37c6250e38b884e12fe14112ef740bed6d62646af1917481762b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9af8aa8860239eea73f6e1e367dcd4739f5d81d25d70c37fdd41e7521ca87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manila-ala-maoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e519c1fcdf423c34192404426fbfec86da7bbdfcad21989db85d727bcf56c7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbba6c886bc9f3b8ffc0da8475c836a102405cbe25ff896fa8941f1a1b54f21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11f9fa2b7c41b145a1886efbd5d3c8a71a52f78ab26fa030892087fa2043183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminasah-afigfmgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec4a34fb988bf77b54cca1101b715adcbf6f93d79350d7151c986f6cfe1cdd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd2cc32f22e2000fb2fb17bd1c2a68ce2960b20296510eb9074c9221ebf93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aabi-alfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22a3998dec8aecc5148bc8f86ff5c1d8799ba9fb802d562c5d73162f9d9a4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otatu-umootari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129a5545363ed7e853495a61f03f95b5adb77803ac625a2ad4076dc74093d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92fd05af9377942022d579664d9bba636434a4f6243f041437fd16e47e171897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162935 Malicious code in nokire-loklok78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76be09a83f4992ad450fcaa800fdc80f738d765298c93ea245818c1a1c1afb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...