MAL-2025-164435 Malicious code in polymedr-minus-buipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093417e3c6e7c6b39ffe13e2d6b68cc437f3e3f7dd62c77b4848368ae95afe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioloipe-agipu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435b015356cd085d458c8566e102e31ee94d57999d02489503c40a474be780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b4b6a9ef2cdbc050aa335c8853a849c1c88e112f2401b21ebceaed34c23bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165535 Malicious code in sabufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33071a9a975c970b9729ff70d8c8882e66bdf8147fc27e82c72b80e903f1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaizbknisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf0db7e5e005d3dba78565d3ad86bfa8b33445476fca33c2fa516e744166d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotipmi-kilarm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057a19f45f515deff38eafe8648667c8c61d94043cbf06faeb43bfd6fcc6af7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153996 Malicious code in butrui-muiko-muyiaksf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf6439f20176f1f271798897e309b43159716407e51361d892be284f610bb1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154278 Malicious code in demdadf-sadudar-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ad12d49efe53621169f2ae0c7b77f16645f48b001d900034d90be6511bc8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f11435feb6d121b873e906d6b88519435bf1a4300193386c7be03c8a8cdbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/yyds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8f2e776f31441b732519e14b7245567940b4063be9fb49abb02c9b9fd57271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseszwassar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f595f0d22d06033991feea2ce2199b253cc1e38afe9e53bce9f5c6e2b5029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157754 Malicious code in kuinsu-luki-kopanusntiaumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ab9099b305c7f5c849cad4318743a66f2329f7547219b236be44a61c7eabb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155247 Malicious code in fitrok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ef80b3f56a7a8d7db82dc5261d4a1dff42dbc7e624e213b547728190ca1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157484 Malicious code in kapvino-somaogamoi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739d5344eeb039665b81fb834706d81ed9a809f65dd9c658de1666f10a29010f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160861 Malicious code in munidr-nerf-minsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad8e4d2b707a77cfc5408e3a148db5e70482aae82dc5055da39fe23a1ee189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154112 Malicious code in cinta-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 512bac0ca01f1d052dd95965f36348cb9d06ccac2a343b2f9dd7642940d1383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sdada-midadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a9eaa99b2188b2808cf7417846a82ee33db3bd4379458851d8f5193629278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe4babc9c3c506d4c3466693790aac4a9d6df33fd77ceb6a5a0a6719da39030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157076 Malicious code in jimmy-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979d479ae59276d9e0cb4fb4d8eff17cf74d619c619b178328de02fd0ae7b031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...