MAL-2025-154969 Malicious code in fadila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb319cff94af2865da99da3c5aa6ca51134abeb9b053495dd5b653ad76143e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164565 Malicious code in puteri-trsud-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250bbb0400ea4124437ec72fafde1913735f8bf5c93ea2e55961d3f5c9fcaf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150072 Malicious code in @mipta1/iuglk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bbf651db6e190127b36cc1a2d549dfd524195019aff49d042c2315f48c1976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168036 Malicious code in teagood-yakuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90a7e4b0aa306f036dde913f93ff092e6f01c2375a6e65121f0b2a0059bca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158758 Malicious code in lookingan-namala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bf2e8ca6672ac9d33e0348d3b770631ec5c7c3e624bca461a2dd74c9aab18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152537 Malicious code in alvito-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbb38c1ed250ffa3a5f703e9cbb2c7850fabc85cf31f710cdc1d0ecab3f2de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169753 Malicious code in uinsnu-lotimi-kill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f53e686e98df20cae55cc524381d3df69cc7e382ee1ef06dc492808b1474660e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-buyada-asaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f41aa92ee5e887cc34df72cfd5d805ceca082df4e8260d8f31989bdea774f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nauyt-mutst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408746d380f5914a67a201d90e4a19f9f7924ca5a89a5a5e375584f08aa6e6ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdsfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bf939779c7f68d692220a66efc0df714dd043aa74b0c5d077e830d57342f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7c49b8fcadaaa06d17d6ac1b1086ea67ed51e5c198187ff8e8ec1a914e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2056e24f0bd8ff6e5662e88269e21853b8bce3a8eb82b129a1d91f4149da57d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1bb59dbed8d2d35ca65da9781d4e31f4fd6067a23e57bff3c056469665207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/asdd-s1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0768755b12114795a5f7bb2f8b4d05be5d093c9b38dba48a9e7752efbf3ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159322 Malicious code in manadi-scaisor-darimana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17ccd98460ff95b5193d5c3117e7c3c0b38e68c0a38128aa637af7a57b05e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169130 Malicious code in toyota-cir10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d572b2215b2a318951c7ae73ba218e4bd1cfc406e7be9e1bce1e6ab268f048d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154383 Malicious code in diago-kamoi-liumakuakoimho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf03eac50e2541342e9b40d60c87fd593ec2dbfb729504793637991448b2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157578 Malicious code in keyla-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a1fa8586a5a763c113989ef778ebcccaffc826e0e8c5fb7ca6385f4bb06a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158712 Malicious code in lookingan-namakita95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dadd71abda1a4539f61164399e2a69b5ba885e654a45e58332bc509aab8fec80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166992 Malicious code in teagood-lokina29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ef79c66f92fe6da9cdc9457a2c0dadfa503b70dd8ea51cf8113745a7d02ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...