MAL-2025-159012 Malicious code in mahnud-fuf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d74a51f9439f9123e427623f64982b26eb67c5ebe13c47d118af7ec40ee87bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgais-fafdosafifafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4de792e5f4366b80a5ed924cbd9ea1b8491a13af44a3dbb5012225d2b57130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e4ba7aec9c9052d1fa9857548b7d1900d3da44b3c6d1b191554e6aa0d0538f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/dzffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509f2b5bae8b25e8557a1b3a9a177118df38fdf59b8f4c221f876639646742c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sujua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3f45044d33499256c0c491724be0f469d0edd15680f69bdc52e801e2176414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c833f95586ea7251e138ac2d5eb3e2d744b7631ec0509c44ecc6e67cd974e3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-midda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8d809bd75c1ab1709c256965212b1dd4bbccaa0ec975e341fe9d7a5a6b84ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3879a7ae0c9bb9c958338d0d8f036510b47e73f43cb96c6bc4f3c0b950ef1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansioda-nodana-munfungu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1cb1c6b6b87f6d27910b102d2866b56d593e2ece3ab8152213b7a3f5b9964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-maranefu-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef3edc9f3d95a8b44ee35eab6e06936d880fc6712c6e10a4eb805b3ce4dc2904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418de2eb08df9082a545c86e971de73182aeea6128b60d0bcc51bbeaffa7eb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopna-mobile-arifaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d94c2d8acda63743beaba1f6a0b441fb146f663a9659d1e5f285866590bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe1b070b09e5217bf74da5a815224615a1ee8d5dc21157291b0cb91d5833bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7100260b6233c5bf3ea1b0d20c05bfabd7bbb54ab39a1b0c06c5a1ff941f9c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166671 Malicious code in tadasdhi-nilai-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7dc282a605f23bc7af8869fdc473a8c8248c0418a58aeff2f466daf38c67ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154308 Malicious code in dia-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492d6b0ab515253967c6982f8774695af28740e0836a6f18bba601e378600d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156791 Malicious code in iomodra-forufai-agoauapai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6892801a799d764bc2ff5ad8a41b86e30bed3e9922bfc6535c9ab72af642a63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168392 Malicious code in tealove-nameka11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c49b5f76ae617a7f4b9a5b49d0da33bc127e8fbf14ad466d5b0e29a0ab2aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161387 Malicious code in nabuf-otgaf-dajfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2907fcb7967783b162c2db0adfec4a64c8c035a057bdc7c5eba96045aeb65d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151907 Malicious code in aiboa-molpie-aromioai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6b71855e8696cb28429aa9f01e737b191ac6fd8e32b204c688b3b683e6e6fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...