MAL-2025-163474 Malicious code in nokire-sekiya80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebbad4facc784dafb2ecba10c6bc6596f1747698b076decbb090cd21ec0c33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158313 Malicious code in lookingan-konami51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6147db586baf339ba53cbf79d0c7a4d610ee488e3b26af3eacd710c897dd92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169136 Malicious code in toyota-cir16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f533b447942f09876718e53b392b4bcdae109595f4cd3c892ae40efb2f87ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169549 Malicious code in uaragifa-mar-safut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd53869e1c64a55a0d8d05af4fe67d5289f21c23d56239ff9d4e7de42780cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155665 Malicious code in hariyono-102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b24ebf8319dae1b453028a493fcce5683ad2d77488a8953bf7e961251c6b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namadata-munar-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfd3d1ac48b7f55f639d52b7199c85819e51a829233e8ae81b0902c7b81a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233901e1516dbdf1dc2d90696f10429071977bb2f5a25cfe5c6e0fc087a5ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a592e7a7df85659bbe14f6cb8d22e3b130ecdab71bb323bb792b442782c8bb99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivalabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25b0b4e940c08a31a8e7df9ba3ed2c730a928a9ce7e3d2fe5d6f3a32ac4c19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4e851182c1a5d4ef91582c5d89fe34cf3a09471e9ab10c7940ee651d1f6b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ramyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592b8dd7a082827fa6e72eb1de6472952a8359d63f3e281b069301f4caac3b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgvila-madasazhofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73622e19e359e11bff82aacc1c8a72cedb27cb8ba006a0ecada728ef23fc2998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-aln-tl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6cbdd08a77391dad7b6b6655e826c0d5e547877864938af83bb066c6b3cc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-itarukinia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95cf87bd917e34e088d84b2fbc7eeaac67d58dd0058b09d6301778cfcbcf779c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe587faefe2b95e93a600d9ae95b73b51f6ca9e5a258d13f98a1138eb8e81a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75d5496798dc2b42cf187da2c3f8b5356831d74c6c5f0b8fc74a9b5041440a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52105b06ae8f2a6b478894b16bc3b40c70563167630a5aab1e94ab87290e31da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5064f3650dfd90bec3403733e42e926143e853cffa7de008f321fe207a373345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalaslui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0ec98fae0f8554d043232d9c5a72d582adf97ee8cce2a955abd67eeba55ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...