MAL-2025-165779 Malicious code in sau-naki-upsidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9be09352ba5ee088006c9e1c5629ebb211848cd8cd80ebb2e432348db81877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166254 Malicious code in sunden-diak-nl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393f3efb1ddcc2aaffce304760a82bb8d78e3ee48356e6a545f4d31c0b505682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163347 Malicious code in nokire-rara57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf8f0beca1ffebf9923357376989e012febbdf3d19e86080a75895ea613b82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157660 Malicious code in keyla-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a683227e835b2d61c169225ef6dd59ef2c78148b970b9725d2b5070d62aba85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158297 Malicious code in lookingan-konami37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078cc009b7b81688782c99643c31fe10594e0df12ec722269e208de07f563f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166098 Malicious code in slamet-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1d1c207b10be3eecfa42e8aaee49face6c2c69bbe455089a7eaacc9e065c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159363 Malicious code in manadi-scisor-rmna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea7cdd1b8467519a482bc0dab8de3bb90e3529d0e5ce190193578a1a5dd669b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163674 Malicious code in nudalea-fofiri-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cf56861f1c92397ac22fd648d693f2cb3db2b577b6a5bf3550c7f0200c52ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158192 Malicious code in lintang-tea33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09291a8b5ac51d5820bd33c300e9a0718ad24f9ad283359abeb4d7c694d99d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156657 Malicious code in inufgi-gotamaiva-jaanana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a67a59f359369a5a08d649db92f435ea987833869cbd6c3fc851d5dab229d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sarpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52141305535eeddb7d2f3cf420e2fd561ba4762139eb3a8769dfcf3a5d396045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-lady34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cf63b8c7882a671c85783b9ac262e10d13e56e223e480fb32a7da1d876c352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyasada-dafdair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726fc314ce3d0b0b69c38239484d128ad596c478257746a08573c04686215f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safia-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5015db74c04f2e76aaaea290fc17a0501020334a1de6c9843da7883ddeb32cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e96a07178b68cb5e02b9fd4b4a32afddbe5d39fc28a747bdea8f102f9309190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71c9c23bb7ae2b18dae40a17a6944dec00f74a8019735d4458f84867e42e1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc32197d5ef15b6d7d2bd02a009697ba1538ccaccdc7470f161bd52643a1baa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiba-alubai-ayata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603d5df7c23acc17b15e2b807e5a0aa6a334e34d496e5bc16b5093112d73a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7682d84093faeaa4cd6dfc24d1e97e68147857300d683fe1beec6f4ff52473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasism-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c04d90a2f3b76cbe29e436b31a3d40869f5faac460c0fd3ac7a56fad03ef967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...