MAL-2025-156067 Malicious code in icha-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fbd15fce2313e73a82dadc511c7da75de627741b5bfb7c20ceca872ca05497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150474 Malicious code in @miptaa02/aassai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c2c4eb93823d91682e1c72e7362f4847cbb079dec34a977f827ea19c1ae394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160642 Malicious code in modirai-igiafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8870f0c8c9146f98f05283c1d1059ad39c81652a5ab378caf8805224ad8670d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166039 Malicious code in slamet-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c472a364f8708d96f79fbd942c5cffa3b16d438c83d20f0af3f6cd1bdcf7d91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158122 Malicious code in lina-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79ba5eadfb5f67a225ce166df30d855e3cfdab1edc8f08139a6573004285c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151230 Malicious code in abiba-alubai-ayata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6603d5df7c23acc17b15e2b807e5a0aa6a334e34d496e5bc16b5093112d73a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158488 Malicious code in lookingan-nalako75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e06bfa75490c88298f386070dad9a56cdaeba19b9f0832b1d7a5400c942621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164435 Malicious code in polymedr-minus-buipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093417e3c6e7c6b39ffe13e2d6b68cc437f3e3f7dd62c77b4848368ae95afe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152969 Malicious code in astia-alaki-malosiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ac64439a50d8440da730233bb70368768377953dfdaa03f0aff695f5515f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152804 Malicious code in arif-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71f1aac0ea150ef71bb8b209b8a4ed10264660615503f14a93481b35593302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153576 Malicious code in avomainah-frausu-oau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41934c66659950cf2745c65d623b0ee69f922928b9542863615b81dc560925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169715 Malicious code in uinsnu-lkumi-kunalab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c791a7b243f63aa95d47da08f2277a68abf86530cfb6932f43e1ed7eda6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162291 Malicious code in nokire-akaza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33081e428b5171d224c4ec0b13b6e222037390e3df334c35ec36d3e0741a6338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161346 Malicious code in nabuf-oguof-dasgusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeaa679f1aa22c0448bed16cf677cce268f1ec695e2eb545a24e290febee9085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150686 Malicious code in @miptaa02/gfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25934ae8ebb54ce00e0222112852216c28eeb822b54dc35f0980dd430cd8063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-muidoda-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afed39e73f2831a0609b4904a56d998c03197d8458ceded2b5749e05f39b62c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasisto-nagama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5317b6c69bb8000bd5b6333a4ee6724e1cb5226d2af65e1a6cfbc451e0dc3cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfdada-mivaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4420ef530956c790b5e19614d560e39b5037bcb727479f0ae402f4aa809ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musnisdr-nuyt-natuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbe7c1993738fa2a818dd4a6d38b57f7787cfeb03743cc47c1618b6d99f3111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68871a76d8888cbf71f54ecb6e2ba75056a09dc315d184af54ea2c1a12ab64ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...