MAL-2025-174260 Malicious code in godiun-tufja-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b00c841a844abe148415aab470adc61ef5b8df5e89b167f8871933cb265f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-sati-fadafuifago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026cbebec2e8197b0a25a4462925bc9ac12f40da6035a96a802cf8a934038c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171423 Malicious code in joshuahoward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7cce4b043163f50039cd2ef6b1fea715d095a229d5b72e3c54f2a1ce9b774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chetanrao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1d86af826e46da544c3728b30c99cf975ec64f68064dfc1c3027fa24d4d7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53da1ee1efd3f07f4b55aeb23b12c9ce56de676d4bd86c2f77b0d0d4761d88fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-namuda-mapotaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7bcc3f0bac8d3f353591344f339d646a580b9361059d2974d39c9bf0989d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-mana-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e18ed2d9f3ddc4dfd887a5f66218252d764e66c28930df712c04872d93b1ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e5b6e6770eb6202987e1fdb9f6927b632f5bf449911c987c2284da7d405e14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibok-inumliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436c7f656cb3f8da5e23d756a3e52ee0c08bed95a67fc50ee9ad24b833dff760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169750 Malicious code in uinsnu-lotaizmi-kununkasilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b34783833021f3b1fc44c94dcb44830ff2ca85bbdd1de7d70c087ba74d5a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fia-jasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d0b1c02f18e37a06a63ba8be4a951c27fbc0578f07063dfce0b84559c401ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169020 Malicious code in tehah-mursa-adsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db45582b47c8c216f67e21ddd2fd9fada1cfdb3300f98c458f2acf6ed0e62264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158089 Malicious code in layla-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83fc6c3d23709d3e1c969df7593fe777220bd57a65292f8d3b6476bcc6a030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157786 Malicious code in kuinsu-lukoiki-nsnbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27745c20f4a043184c3cefda246f16be188c6a35be52ea9b0ba7b29204ecd9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8027f47b34e00b17bac44a76c02d2debb90a816f255dcd58d7952214c3a91694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a164b3fc582daff60e5f37a1783a64bd147ce5ff27a28680436c34b86be6d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/gzaeody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1402f626c0bcae362dfa0c60892dd227b80d82a4e5920b0edf7d50d7df6afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasisme-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc2c60cd99d7c7ff8b02e2a175726ce5e8a762fdb62e63f8975b8c599e0cf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156475 Malicious code in inal-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c47fbb94232009209c11dba655352953c55294c8caa4b2ef91f581c776034aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161250 Malicious code in nabila-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7141543bc7a91ae61641fa06150bc2ef71031496c0347bc0cc68adb2842b2cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...