MAL-2025-151113 Malicious code in abeh-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f703b80cdfef80defe71d7dbd6c798b1cdc626bfe26dd9ae5055cdf2b77d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153092 Malicious code in avminah-fagias-figanfayofmka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d29837e1a324dac6b5678b45173821ba46ef07609bb5d96a3b98f3cd933f4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162421 Malicious code in nokire-arjuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6d4e0af50135a81086417029d10b0bb300aa8669f8650ce44c2f58c485bc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165772 Malicious code in sau-naki-iyuulaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f93e5c3644cf00f5e9cd1960674987f56d0807eb41ee04be71e29c5dfc150a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731ea733ebcc6f4698fee51b9d008288050556c93676dcd327eeb7a46ecfcac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otin-afofsgagoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53da707c01bfcffe54d952fc27531d36f056219ccf6f0c0ba9b5f57d071b204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aligaa-aihmava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b6ecd47913e5a3dd03f3189b3c4cfeac31b536786fbb2cb56b7996a62648e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sdss-tdessrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4144a5f34a478af95eca9d32282db16dd2be53f69d03e427512a6671b2c02f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb4dbd8329e7be1b9d0ff97317075868655b1667e142b78f854a3cceb025106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e0b95c7fd5faca135921ea10c3792fd83d2e57e9660c73ba37c9760d0d4af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f06454e5651feacef0d7d3ee29997094edfc6673fd13442f066656553829e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f7c0aa41c2c4f6649b38e5871863718f0a6a3d9f63a473316cdc3efa070263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/woh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08820a33461284585bc6618071e21ec266f93156f83bd507d3cae8be8d76f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasisto-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5317b6c69bb8000bd5b6333a4ee6724e1cb5226d2af65e1a6cfbc451e0dc3cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbb96d5b6cb844d754c072182849d400a77fdd266b456078356bebfb39c8bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makanabi-aibia-ufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af59789e184fa2b917780fdd57612135fa8232118fcca625784314c75ade6980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvauakli-nalaui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7739ad14315d6ee6037fb37c0057fc02e1cabe24aa8063d06ef55990129df67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29fa6dd4272d6b65319a595653a03f6955f0bcb19e11e1ccc34b51e95ef67af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94c77cdec29fd324b86b9000125966b5136d44fae981f158bb2bbad26bfc2263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatf-buat-buata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323e6e11d4f2e463de410fb32c333fc390652b6622e35d01e836cb4975f283bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...