MAL-2025-170392 Malicious code in verify-ayica-amalaunioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62cc3bed7ad9a899c9eccdf8e9733e6a8829b81dff117edcabb22f41d4eae21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151981 Malicious code in aibuna-mobiule-amainiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b93a460e2a426d6f1ea8ff7c6fd183bde082a464c8b949950c13b17fd3e034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168891 Malicious code in technical-alnbio-tolimasyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4152e464a3482db35baee44976ae892479300fdaaddd8f2369a71936df3939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167867 Malicious code in teagood-yakuna11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853ec537a0397a09a26f453937d0e1adbeca394dde4f28cd29b5fd013f44952c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163878 Malicious code in nuilava-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b47aa02fbf6f758ab5be2b430645a3a4742a885dedfa76184fb02dad0f2481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153863 Malicious code in bitha-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e75457450d6fc8e4119e06008b46b6265fec2d37b7f2d3d5334283441a92a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158944 Malicious code in mad-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934402f5d696e63647def889f526f5bb97b2e7b95ca299100a2007d127cfbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165844 Malicious code in shilang-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb7e43408e1f666221f63f5af177954141160c2ec46477de169e7ed92b8e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167936 Malicious code in teagood-yakuna74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ae5ad89c753f09e77a951f1c5fe91f9569bb7f7bbcd908282d7b2ab1c4ac3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157910 Malicious code in kupai-ukuta-joki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b03acff4aeb5571744c1edb08426d6519a2e6704e10b697d6a2f11f0a7ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165842 Malicious code in shilang-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b20336c8b2cc5f0c7c88336448af8197d6990180f6cbcc3d961b30de2452d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164466 Malicious code in polymera-butyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7bf2cd4f7b823abcdd0dcaac7426e7fd2049bfcacadcba5bcbc9110d70a152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-framework-izar-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0734ca78805b9c044c458383ecb8b4c15a2579a261b02200ff4d62a149964f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-public-unuk-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d5a3b35db50fa8d9809095d9a28923d3f8749ef04d21133640662959f81ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-draco-izar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d2ce4aa2c840283bbb45f4f703c277c08548669ed22ee03f7ea74bd5d784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-capella-celeste-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62504e796bd511f6ae8435cfb9929446aaf2fd1b492445401e5490987615812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-mysql-element-ui-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0b37c887e82b3f21d7c2b6fc291bf49b40f5d203b7087a9ba391acf920be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...