MAL-2025-159556 Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165935 Malicious code in siregar-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56900ac03f8e04af083fe9b9228e2216ceba00601cb6a93cef88ad316a8b8e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161609 Malicious code in nabuf-otoimn-aiagfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da302d8156d22ba880dfaf66a3f205c52f23e6a735c5cdecfe4c13b2209e38b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155199 Malicious code in fitrok-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e2935152789a2221d7a6e006fbbe00509d62768b9fd68d50f9a96904d8e358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157601 Malicious code in keyla-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4840e37b4c52a5531890eeab3169b17cdc55b8a9951f4c7c8ece98a94abdb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-namad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c372ba83f2ff58994ab8a3779ac985c0cac0b290ed5e55889c9fb2ea9c1656f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46de616e1237d921e37c977dbbd574c7cf65b8a018731e758f3348ee633920e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kalop-kalousubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a92eea526f5f7bc1bc8b0527e6584dddb77a666c9f8d327130fb0ff29acf8b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9feb32374716db4760e60a4e2335eb80d5eba2f44ea44f3919601261b98e24f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3116301ab8f4e1efe6c3e3baf541c4d6c225b323a7cdf657cbc9bdd722729f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansia-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d9a2786d81f73bca3fdae863751f572cfe334b619c01ab9871a593f52b677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-natib-yalu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f02d83f2292e433fdaf0dc33c4b699f89230bf92a459395ba9865adf453d145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7930141d4c1e4f6f3780a7ff897d9b02b991c4713d7278fd57e533f75a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-diook-ikuknma1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2425c9a538883bfbddef576c22fa87ed4077eda758c419f276b8195992e5dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ad071ee5bcc85b09af83ad6974f2704afe9a23ec54f94929754edf7bf26e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006b1dccb6dccb864837d753369626888827bb5d1b52b9c23659e511f7046f72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotahmi-nailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9686ff14c2345f72c238f13efec571b6b3d9c49e2f87e84ce358eb33f6d696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutr-sds-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ad7daa8be4eb33bdacc2174a5fba24159ca4ca248163f7e50929522f66ffa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9740d4cb71c17aaa17d53ee0ff26c15b277087378f522b24ae001f4f5ea1ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...