MAL-2025-159312 Malicious code in manadi-scaior-dareda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b38fd2a76a85ac54cbe0577b24dc24c9f0c2d7c46691f5acc3331a398febfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162872 Malicious code in nokire-loklok20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b0af9676c19ced3467255a64d0b8ca21b77ab2e0e930c3983d5e0611ad8693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163171 Malicious code in nokire-nana2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134a34bf91ec9cab35db3386290e0da8009401258080eedfc0cee96454b42bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-s1aa2s-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d236ea11d4d39c2cf2ac757dee61f84355e4ddac0d044c53eb0c918bcf520c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fati-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb9fe2f25539c1b1e3d3634df8d5f6f14ccd4d143783abe4ec0e19db52d788a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf9d78239ee6365870fc66a21b1b5303de46ecbc3ed7570d5a1a519187c620e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-musast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0eca39f3f5d5439c1e26d425ea03d1949b1b4b6095f366d33b837e5577c0af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ef8213ec0f1187cf3f0fe5fd826b46450a9b4155e7559f1ff04313ec320da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ef4f79a73e8e161cf9fa7b856ad0108990a8c31d3bd5e138c4b39cefaab1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce36c79f37a141131c6867522efa38a8419201ebe6f6d32cb3a5e11bf7c9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701d01b3de94c6c7fef2f94754583dcbfbf002135ba1a2e4f0d52114bce32c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nustar-miuyu-muicac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422a8c2048c34d9433e4bd81672c1b01fdb1b11671eb0d47223e2bf53b0dc962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6fe1944c66859d8caaa214874b2ecd5bc55551b5d9517a9f9392dfeafbaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032578a962e5c48f2d40fdd92bc9d44e66e3e9ecb92faeb919499c5bd64f7a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fagais-oguyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdbdb6b4a4637f4ce524b867630d868b6d57765175465dc01c1cbfc8d698668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159336 Malicious code in manadi-scavior-dare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c6f8a599b4c93d2b7cbdfa7e1a922d34ffb5928d159d5d9e12d7f061357b8e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168944 Malicious code in tehah-bau-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c1c41da7ee18d711315b9fc536b8559dad3f93c7ca974f3e8a2eeab9af9020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150483 Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157809 Malicious code in kuinsu-uiu-vinalimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22b389759810716cf65f400936fa538df7f3139ef6d65cd6eb35e3b9b3db9bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...