MAL-2025-154920 Malicious code in fadila-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658a5cf37e25e9e0101e004e0a0144d263c153c490b0977cca5f6ae31e046a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166443 Malicious code in sunderlan-uyilud-vamnauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd6475291db8bdf9f1f352504e6f5f9abf42e708511f35e72b693dc1d84caf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157884 Malicious code in kupai-lukta-joalbik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84de7eec92c601c903b5dafd39eb33333d98e32d21ad6caf6541b47b3ef7567d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160113 Malicious code in manus-tavauil-maoiti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce171c62bc48179a678d3206dce8ae7d900be67d145522b91443761a9827c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156427 Malicious code in inal-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b02b2fa9aab585b4fc1f75713bf7c9570f8113c1c0c08137ce63dd6f79cecbb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153920 Malicious code in bufani-muyu-bfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22d8ab5ab683647aeb7e6567cd6447eec6b198d984606dc3b5e0f9b93c96df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154183 Malicious code in dajouka-scelseas-rac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4500e048cd6ddc0f006b64673c6b22fd88572fc150e0f414ca80a20f0cce1fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157799 Malicious code in kuinsu-luuki-vilakunanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa32980f6445ed8537f8df2cc6d0b36d1fb434072f52dc113794bc7ce1d72b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166413 Malicious code in sunderlan-ud-vakumani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98e1275b68ec306a4e36d1bc0a9401460a961a50382dc33767ff5a361178af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165107 Malicious code in riyanto-123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce3d7ef3612a0e7ea2dab5d367b480bcb8a85121a21229686e82d3240d9461f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161079 Malicious code in mutaus-manasips-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0f9a2415bfc7d92175135032dd281eb869c0d688188473858905cd13379335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160655 Malicious code in modirai-igino-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2a7d224abceb4c58ece7eaccb684603341f4bb4b74fe79c5825e34a0b3f617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154824 Malicious code in ewa-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e82df51997c6e63bd28bddbed5d1bd18fc0d1d84308cd2487e276d482ccc06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abih-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709a3276b86ec7c781427dfad43c1eef89eafed335aa8366ecda3cf336db5015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-sdubjda-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa2fc0ddb486cde642b423b8b582222eb571ec5ed72c906f240cb72bfe6e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kunami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5461b24431104fb7fa4c30361b2ca27f30f11f3b6403816f75d2426d3bbfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-aafof-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1404cb1c2c3bd5a66d13e91931ac180faa4d79a80000142b715dac00ec111ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/nikontossaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 756640d5597ae2b9ae32da4c24ae8f05b7fcae729b04007546420e43a2d260ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512bac0ca01f1d052dd95965f36348cb9d06ccac2a343b2f9dd7642940d1383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c32cf99423b447495a2e9faeafe299388133f8383b72ea22511dcfdda4abf917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...