MAL-2025-155062 Malicious code in fauzi-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91105a18a52db609d99aa8b6297ae4eedeb2e65a97818f83fa0d467a7c7aafbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153310 Malicious code in avminh-afagias-ifadahgaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df11f9217d80a3b5a96d7b1ad7390b2a1e3b8316a4b8f935d7cbde2145a6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163870 Malicious code in nuilava-dakaogfrae-nhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5d09cae897846fc761a335c01f99954281777f918b868155520a677632fda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6323c1227ba60a4146bc88aff927ab730f502ed88cd010060d37d702c2f06711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irashi-se-swe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a75dea3452b14ce5f252a5623b7422d0f398b3e7658dda1cb4bb95a5a772f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9cc14734dae5d74223bed65688ef160c961ba1608a3a1c68e6ae3edab2d878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vakumanakli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04c3a6cccaf77657d51b881066ac7cc023458b38d4a6af0c405bba372a65fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97f6dcc8d1ebac18f891e5802b716b1ce15d3eadad58986a44d586ebea7b44e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ceeb2005a67c29731377f7e7348d4e9fe41fc7f0dedabf2c6e5b354f625511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-s12as-ra2fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a1c7ac5160c081ef65179cec81893fb9737cfb4927ca769c9e1d2c202d5512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-udk-vaukli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace2420c58da71bcbe5f14bc521c0e2825f9f30bce8fdceea33833d86195dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-saaa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d5353690a33aa86aa0308213a1531915cbaa155fa3ab45d25b26fe04e765c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d671f890b923b00ac51dd4230d175617bc931dd47f713dd9ca2e3929f998bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyifiuza-iytadut-darifna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f4fdb185eb4f2a1437e2f9f0f24df6c50a035ad671f754d272c3d6b3d77134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba20c1a33d30aaac013cfe3a6ec3afd97c830be0c6096131e20594167651310b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/arul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1cb63b7c801f2ba15ccb37c10a54168e9caf47a859a817da269b419429b0e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 016e62cdd627d158ec0cbb1e004f41982c15e9e2993e06678ce8ab50b44f7d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuysata-bunajsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01530a781d6cc9523cbb3f699ac9ea6381c713349c2ce734c89ddc125078cf99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otogafian-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b9b0f4089dee87e9e2531d892a06c8f91d4983f70fd75235cf5fc93651dfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-uyilu-vilanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7295ec4f48ef086c60a4683ee58b9972b446c89b9f7fe36f70efbbf6840b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...