MAL-2025-152150 Malicious code in akabia-aliguaafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb14b0b955ed32fd9fca05661b2927fd0a8413fcc41351ca2183447f92789f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166115 Malicious code in slamet-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4faabd6a842616b99973267ac54e63a2a08806a2f7b0a1ba0d03c8df50107b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f723d10e91785fd1718bb92d56c07f922ae4ac404d48dca0b0bdd7786e65bbeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163397 Malicious code in nokire-sekiya100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534f8dd40b41c73f87d2911a1cd0ff642b5f022b53e78983d346674aeceb489a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acgiyuyia-iadut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db12f23379658237d457a718e2bae7378918a87f1217f0e4958414a7ac32d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mihcs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243b2fdc4425e82ac29e9f107b32d151b4a4be6fde53c9f24db7d309f6fabeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163864 Malicious code in nuilava-dakaogdfrae-nffamhaha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f949d999735e8fc057711c2ffc943464d80276c1c0293772ad33987f01a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154028 Malicious code in carvah-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12347d6527be7586678091fdc89555694e4050c477aa41c54476aec5db128dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161200 Malicious code in nabila-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227dab8ce153deabed6045090efdea50e3d56cbd8f7608076d54f4cd185febc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167907 Malicious code in teagood-yakuna48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac11a3a7795e2816858c07092350e1806935b23a96c993eae2bb4c1453dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26cdd68546bc062dfc11deff17cb83863d148eac00cbca8d72806a59bf4ab39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163446 Malicious code in nokire-sekiya56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6636885b62af8607b7af8cbcaab82f74fa16ad66da52b4abffc764143d6e70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27366417758a82c087b277992143cf1b282c75045d25d1728b9e4fe148c3e51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0623e911b9ab7a35d3773a37166af0e3dfac7f182589231da22eabbd544cabc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-nutra-dfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985ec93b5eb7dfb79cd55acc366fac623a4d6db147851384fd65fda0239451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-sadasaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d674dfd7bcaedc879301666a7bb2c2795b44162d9c371b363faf46e070e5173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kamoi-liumakakoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 230ea71c3c1d595ac9ccef996195b1d90c3a2e2a6deefd3a736290cc1a6d5344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151078 Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150665 Malicious code in @miptaa02/fsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989f549707e525d508eb036f8ce54bacbea47b8c65bc578d6766ba039f126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...