MAL-2025-155860 Malicious code in ibanun-ota-umumauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef929287bcedaf4a4ee4298a41bb6573985a3114c073d21ec39d130f07b965d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150864 Malicious code in @miptaa02/nothis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacf5e7cca3e21ca88a08fa59df471f28a1839512ddac57ee914b1c67fc21be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166770 Malicious code in teagood-cuekin1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daec12bee161d9ae80499645f638a7131289ce9cbdf9a3b91507f675d73e5c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164340 Malicious code in poli-aki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3767b172972d4d77671bc776ec2ab0a0be3717c66ec308d04eec3a06c8c4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161201 Malicious code in nabila-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c0d8313f5eed921302657b7f1776aeec4b30bbb64f760ac5d6f5b9581d2992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150806 Malicious code in @miptaa02/kwnhj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d045478e07c8fe3cfeabeadda1e69a9a3ce52f3c54756b426c9b26d14049a9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3450d754e526cb305a74616b587fe87b080c0812abc502eba1a8337cb2ae485b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lni-limaubikai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60569ba26d8c348bd9f9397a9f89d480cf45d07968796ee0703d2dc931b94c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160996 Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digo-kamoli-ailasoml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e850873148b5bb8dacac08ace2faaf7478b27680811e61a36adfd1454a59fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuh-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9136809fa12322dc7854ba2f53dcbb85099ea41383a04a6378fef71daeb60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-shout-current (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6309af85ac43ce323e7bc64517950d273299ecfb8ec69353c1bf3b9a76b4580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159666 Malicious code in mans-manap-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce20956627010af986a164d05e3300b076ed2ebc28b4a1517efed72af06b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170094 Malicious code in upa-lubalauvalio-ilualsgdfsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e75f1a91d1cc1c9ffb941f3c458c9798808158b9d8b156f1e981bf2675c86c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivafifd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c69f5d5aa3142f4deed5d5aa743047e4a30e7217d89fe3b36d979fdc695e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke114 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103fcecd6f6c1e18cbb2afeb6e633b95d6c3b328914bfe0f4175145885f6e28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158383 Malicious code in lookingan-nakomi25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733515eb6b4d9adeb43540c53723f2acb96cce913f8fc44db6f2d3ef216c154d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...