MAL-2025-153543 Malicious code in avomainah-fras-ofuratarau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1240e06c635b48ac3403e4abd6f3fabe5c4be323d6ede35b92f8cb85bd9d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159307 Malicious code in manadi-scaiasor-didadafra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7da9f258d72d09e01bd50794ae78fb6518d8e2b704cf883c6f9872b48e451af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152648 Malicious code in andriani-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af16491bf63da7cef805273952bd6fe9d5df2ccfeae5a931a7d153c56d6fb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152159 Malicious code in akabia-aligufi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cefa73b7346c5995f1ab14e30c1d91c737d30c55c75d2000189b5573ec899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-namad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c372ba83f2ff58994ab8a3779ac985c0cac0b290ed5e55889c9fb2ea9c1656f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46de616e1237d921e37c977dbbd574c7cf65b8a018731e758f3348ee633920e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kalop-kalousubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a92eea526f5f7bc1bc8b0527e6584dddb77a666c9f8d327130fb0ff29acf8b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9feb32374716db4760e60a4e2335eb80d5eba2f44ea44f3919601261b98e24f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3116301ab8f4e1efe6c3e3baf541c4d6c225b323a7cdf657cbc9bdd722729f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansia-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d9a2786d81f73bca3fdae863751f572cfe334b619c01ab9871a593f52b677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f02d83f2292e433fdaf0dc33c4b699f89230bf92a459395ba9865adf453d145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7930141d4c1e4f6f3780a7ff897d9b02b991c4713d7278fd57e533f75a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ikuknma1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2425c9a538883bfbddef576c22fa87ed4077eda758c419f276b8195992e5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ad071ee5bcc85b09af83ad6974f2704afe9a23ec54f94929754edf7bf26e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006b1dccb6dccb864837d753369626888827bb5d1b52b9c23659e511f7046f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotahmi-nailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9686ff14c2345f72c238f13efec571b6b3d9c49e2f87e84ce358eb33f6d696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-sds-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ad7daa8be4eb33bdacc2174a5fba24159ca4ca248163f7e50929522f66ffa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9740d4cb71c17aaa17d53ee0ff26c15b277087378f522b24ae001f4f5ea1ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mifthusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922facf1aa658aa34c6fa83b588b3d02894405ff0cdd9d92df8b17f6d910479d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...