MAL-2025-163926 Malicious code in nutr-nutyui-mutriao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e05da7515e648d113c624569277cd1bc98f3cabbbfbb0a8b87855bd06318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150451 Malicious code in @mipta19/ttyt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee8af1d408542316707e0f140c6fc06c6392ec8a777df03fe2fd183b80f07c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149944 Malicious code in @mipta1/asdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683063c4a2e43d43c06a75cfef05728bfff2149e1aa3278f614b25458b9702dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169203 Malicious code in trevora-cir147 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc225376397d38cc42811187cdb5754bfa954fee0ec345b394e70c7d5f2836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157364 Malicious code in kamasada-nutsai-aasaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c0b52cc65851d29db612af2cce78b598bea7bfd790a0efcb0192800c837884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5cc8bf760973c0feafa69fda20560c014923cd340cbe8c3ef6d7c90f97853c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec58f13a98d26d9b1e94f16ffe18f9652a310b3edc2d5f1936b1f0be2c5d268a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fed1470e22732fa58b8da959db1ec34a2cd47e635c7a4e13daf66efa227065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ucok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7461d16651442411e884d15aa547e9be793a270fa4ac5f7c3c90af7d06909b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ai-aiusai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a955b813632b1cb3b6f31e857bf833cf81a59e351eb30e407ce86b2d2823133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofty-muatigu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58da6a51503c77f50a6e3b854fe1d56a39e94363fedc6ee660d805376102fa00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26dfcffed7d647a26fbb9eb5dd116630dd9506c911e7c6f6adb3ca642bbe24e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banavali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bf78c793688fb3c0ef5de4709413263a1aaa0c3f841ea410e33b1cc285649b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1069fa97ff0ebff41a8693247755604644aa1bf201117ec04e34396339d0a48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/rtamyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013897a464f991475d0de33a9e6787a066e7ec91fe9b5e44d45b8de8110b16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d394d63c9eee98f6c29f7c933adff89d5a921b18565bf2469029519851283bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224eef888fcf06a7e7e3a914d631a3c338b8488bce4997300a7ed47b3236e69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca41a7cd696622feb6071529ed1074a5d7e842aa64aaf12226214a6650587b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nvuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7c323dd5d992b98dc4e592b9d4efc2fa26958e85c2b72bfecbdb0a82a48169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...