MAL-2025-151383 Malicious code in abina-amugi-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21fce1fc2d6aaead7766094bad279014bebc3beb9ed32c808f416ea1e1dcbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158642 Malicious code in lookingan-namakita32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18554ebca45846d4bff3d57c412957f7340c32419540426f2c62b1f1b89e057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158804 Malicious code in lookingan-namala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61be1ee728625253931eec5158f8508abbefa7cdc984203f9c922c6d50129393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164053 Malicious code in parwo-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c66ce7d99976a5179b6e9b40076897cf0cef65fa4700190a7274138ea41a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166938 Malicious code in teagood-lokika70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089ebb42ad2c6b5c31b07f41e883523feb082c233d385d4a445443f26d73bb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162191 Malicious code in nokire-abimanyu74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599d050030e81277aabf72044d18c55e0b4875a53448284b80a9a6593bcc6a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155117 Malicious code in fitra-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04890a831aba83e6d49d86abaaa8cb4a7f616fbae02c335a131094caa59eff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166385 Malicious code in sunden-udilssk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5afd8e40a6596861eb74707473e2d03f55902a993111d0a6e36baa103ea4e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163548 Malicious code in nokire-zabuza57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a145e994af2843d9fc9f92681843bdacb870fee8a3ecd70ce18015e4998510c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157188 Malicious code in jurss-gsasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aeeb628005b052090342f06e52495b766e683ad29f73aa35cf8ea9b07c96dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151506 Malicious code in abiuna-mobialue-amasbioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05377cce9d775c6d56700292945e539178120a4c7d8ae335adbbdf9b64eeb38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169852 Malicious code in uinsu-lista-atukamunima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854601b4f884807998a4a1df4e9ef9c021bbc491f449d11587aaf1463638bc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155942 Malicious code in ican-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bec5c0326b60a0f26d5844ae2bbc5f10bb276fe0038efa2d4540fb28819b8761 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164574 Malicious code in putri-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e7483e9d98a6d86557e92f336fbd1b177847dea1cf99bf945e9521724d8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-solis-grus-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1bdfdc7bb97c3e6f4552241ddd6ae1a7be05ef2b820b1547391c9765a70c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-local-phoenix-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda99e9af2d5c829feb9d0c9439538d13e85d62aa7ea9fad3e708936139f476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-draco-izar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d2ce4aa2c840283bbb45f4f703c277c08548669ed22ee03f7ea74bd5d784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-spectron-webdriver-blitz-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8223b54c0a122db06940c034ec46cf12370cd47368b39da90698dcafc458ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...