Malicious code in hafiz-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfe3abe6c890d38167ad8a75b563d3904570e35a806e724629ddf30f57af3e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dokloi-ikaluk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117e686deaa2e511a5a3b7abff13d82d28e9c546f10fbad932df5a696a1e301f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afiat-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c926ab0a131146f732ddccded0adde6d2b4d6c2b16d3bc2a2ff84026d93f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85179154a578fdb4e42afccb20153b6c701c5cc7b5c45fff992f13ac4a26d7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8c5c15fc15f3ef23ce709ebe17fd1babfdd9047365b95dbbce78a763df67cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e34b5ca6c69992169d4ca1b47665875827cba5cd74440b9d6ef0bba8e15bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/wih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c009769966122fd0b8591f27a4fa2ce1767860701de5377f7974f55190e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demdadf-sadudar-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ad12d49efe53621169f2ae0c7b77f16645f48b001d900034d90be6511bc8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makaimaigan-aniga-uag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7186d1dcf40ae9b3cc335a2258ce71dbdc428e78ab34239847fedd78da49da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d59f782ab14989aaee70585f256d0af25147af6bcf126ffce592179a5eccf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soradidaf-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bd2bc4bf15790c3e02064a41095de8f5cd6829c7eb5f9dc92b6e7d68ecd2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tla-s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d473934d3bd406031e812bb37aa93827c6e490db64f278010bf406ee8d160e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/s-ceh-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544340c3be061028ed2fa583aed91285cdc8ad608b7c3b4b6a128663fecacf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e4002c7cba14a46eb049071605169f76b410060aa2f003474a7f3f61a7da65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c61db9d655e2859fbefb0b57a7775dce013615fc3ce6f3e80ec0c01c8813abc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-afati-urufuafayo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e386519295be1fceff16497e7929ab0ec7108b32efd0a86c40f866a5a3e6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sadpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86ea4e4d20306bf279edd03a7be1c963835ce77740700eb7c64f5fc7b6e2c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d75fbed96ab069b6702276755274a1d132a0156819f623d41c948020e0f29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163350 Malicious code in nokire-rara6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ae463149afb73f5e98b7f40f66170f62029e82d14b5536b8c71108bc81cc27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...