MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161039 Malicious code in musik-ddai-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dbd2796f9dd1da8cfe736ef0cffa4cdadeed455c6bcc0605f5f28ae87769d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165302 Malicious code in sabua-muha-nyaianfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d434bb2a69130697c403ded2f1ba41ac1e9117a7233161e7f5e99a91c17594c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163844 Malicious code in nudla-ofog-aga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3607a632ddf54b34ecb68eea529365a6cc715e2c8ad2ce45d6f2314cf1cc0fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158716 Malicious code in lookingan-namakita99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d53d86ef3808a26c64e829cd6955743fc8d0e06fe5bbba085e8eee518b3c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151717 Malicious code in aciydua-idusust-daruu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09acbee28216f791cd75600994d0a019054d208023de0150f6ea2fd6632e9ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151029 Malicious code in @miptaa02/wgfdshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d98ee653edb75433aaedb3ec26ce9ed8da263982abe4b452d8eab5c01ff3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150819 Malicious code in @miptaa02/mawu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309ef10cf6c47fa85bb21a066ca1bd6d17b7ceebc686cd09a084dd82b49bf746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158484 Malicious code in lookingan-nalako71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83a4fc9d9f3976a491bf768471c50e323f530a3f6899551cd5285d578998b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cd6326cfe5a0deea565bd9890345293a028f703b09bf927849910829132c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf714202b51b99aad16d2eb01f8b4d417ca92e07260729b35a1b734032c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591673ca1f9407e9886bd4da378721fbfd8ba7019e76562f019b15b1fab19186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44cea612ee7a5dcb206ca578be549bc8713d1ffd12658533e48f56fb362d2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e5fef1f356fae4d08c06702bc43d4de0d0bed77840c78a58da6edd0853df4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-gotmua-anbzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7492ab522dbebce0414ca4b94df321c378a0299e45cb7626cca58f249e1926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abu-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13442c77be56dc02a18eb510ab3f868ecdd70cb7d0249d62c94f22a30f870fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamo-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a53dd162e1533b4edf3aacb1e906a46b0359d8027d03cec841037f9e6eb70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d8dd85fb416f696654327028a8507a6450aecc2057af071a4d2ebe4a5758f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tadashi-tsssu-tresud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e6831460703551ad02f856f8c737f5aba257f0486966a3bc69af35745ee48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...