MAL-2025-154357 Malicious code in diago-kamli-luaboiquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b80c2ed432bb8ade4b2ce148aee28f4d80757e5046b9acca7258e07e8061975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153848 Malicious code in bitha-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a1e68db871f95b5b67cbda769828dd0a66fc3eecaa550aaf580fe22d06daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169797 Malicious code in uinsu-lis-adakinu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8fd1c145028d2c243b5e95f1105de4778b26c8eef00dfc04177d691a62c178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167655 Malicious code in teagood-nalikoli95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404063514e61d430ccf80dea6660de6eda32867755942c05858ed5077f289297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150710 Malicious code in @miptaa02/gzsaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9cfc2d66992fc260b3c5e71ff6f461fa25d2666cd90989cc2f5166b0b864fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156209 Malicious code in ilang-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f480f6cc844c019624fc757b76ff79d1fedea008f92df1006e28c9a604e738ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165925 Malicious code in siregar-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ac654d7eac3617514cca271eb50d0714c97c46084d33bbf052ed8eb28344c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165373 Malicious code in sabua-muhufyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4597fa7d902125053916b42567b71c93070548bc9d3831ea280a5c30c57a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/kdadds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b240a7f5c268572345f7486871761114dfd600c8b2f36de3b3649ac51c4b53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-fr-fafuada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfd481b325bb3426985fb9bf7de93d964c53a86803a494c4db1cdafbba7794e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a8850e3e45da6098bcfaac69257d80f78d2318e418af722b9e95d6b7c9b952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85016a8bacd6bbde106508f63d7e26964993bdb91f812067d084ba55f558565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 363f0383f0d172207ce996fef7a51de9a3d52d253c3930746e845a8b1d64bc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-afif-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd02ae622dd3c7c1c110ffa7683444a08ee759876579f127162dc2c572f4472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7883a41b067fd13b2994763a1d04e98e8719d68c72ff01ae675074019d7911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafussfufi-nya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb778cbcfe39145b03b2d4fdb83e978d1d738816b76d4dbc03800b5c475e1460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unagayu-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1166f80dcc52ee0e4c7f8c19f13fea1415748d37b51c4c224e67289b6716983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monadi-nads-kacan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e9d9a6b0f9bcc6a718d1dc0e69232a68e02cd1914f62175415c747e1068ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c77b218072691559c77e77022422aa011f2ec738b5d3400accc22df4d5627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cab0dc959cb482f61eb5756b78ce9ee9898e2e2f9334ee43c2a1b3cb664887a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...