MAL-2025-152057 Malicious code in aji-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b914fe593dddf32f289924ccc558ff16e6e470cb89a44613f217bbb676bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154361 Malicious code in diago-kamli-luaqak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 526cc05379949e9c36de72fb3b3d0ebac8c02dffd728f2900ad791fc579f12c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163624 Malicious code in nokire-zenitsu36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a7f1315af53d8b41b48cc7419c820521c2ab8aa432689d30daa43f1386ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159639 Malicious code in manda-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48839bae2b5a1999c39bc1e43a1094d439fa8163ad7a6ffdba5426890fa827d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166594 Malicious code in syahlan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea58671f819ca75cbc500a288b609e18fe1576f92b03047e03eb686cdc42e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd74fc51658866f1465c59d8e06fd970cc6a9383b2b9106310596f2dcbb3906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7510dfb20ef8c07856bf2375c08cb499eb09347eefc5b78db3d4649de8263a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioloipe-agigsapnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1beb91c7f149af1d08db010d667b16c92012a21b77787c63fe57ff8f0a474f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uhao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e145e72be5016bfaa9a53799215906a79c70ea169ec68a84b9fb487faf711b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguof-dusagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0560fa902387ec0abe08dfb200216f80fe27360ee2cd8b0caedac937b87f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6375ea1c39202f54b938b0352534570f29979f0afc78f5dad38264e43cf15067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73abe2677c0f4a34d74b7d78caad46b26bcdeec6d8394a17280a177453a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccb30bc28658351b12360076de0bb02b9a4bde78035b70560bd66ce171f6e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poli-akilu-lunakina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f686adf947657a9de75475336ab907d273fd6f624712ddddd3c049a3affaf0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158024 Malicious code in layla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745ca5b405dd3235a248750c3d0a5fcd0552a4aeec0e82e6f20c1804a3b34214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152881 Malicious code in aril-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaff9788645669070bd0d7f86d8c3a1e6c1beb3f05e8b4e4196ad3d873635b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153836 Malicious code in bitha-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592463ecee1429ea74cdf7d58be2dc0bc3616080e31008b139ab743e8d14560c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161906 Malicious code in nasrul-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 525b77164b0948104509ad0a35548bf32382e7f31e35038f66613e03b5ec5cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165590 Malicious code in saku-ai-upuasoanio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31794e611169a91339df02a4a30040782774064d1ab90588e66e076b03031cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161008 Malicious code in musasiak-butsd-teru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19351c2bdc0bcf7709e31da5a408ff7fe81dc0ad893981308465c402e55d6c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...