MAL-2025-170076 Malicious code in uinsu-technicals-portalsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6fa67e4a4398556ce6ef4249b50be1c9b7363a4461a9362475c7639163d4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164224 Malicious code in piluka-ali-icpibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f50e34ff412ab3b875c4060ab98a83d2c38ef11827560c6fa64496acfd3d241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165282 Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158892 Malicious code in lookingan-namalaka77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc29df0c72e26e3f445ad750d88531b62401b2d0d825da38ac37a21cd8d6cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166303 Malicious code in sunden-dibiuk-itan1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed821ab8d2cc2045ba952f71838c00e1d303210d19f3d20e94e87eddcdb26903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165897 Malicious code in shilang-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148ec8579a43f1e9350fa359436049c52b19001556b458a8770f5491ec1a0003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154381 Malicious code in diago-kamoi-liumakuakoiamoho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef7396984f91a6a740cf2933deb6bb97c01e8a6fbfdad09a8187405a1eaba08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162087 Malicious code in nokiragne-asafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38c7d55bd357a512ba67cb18a068ffa8d9d017688e67170513bd9051ef7e318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159447 Malicious code in manadsi-sfda-muradaiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2b6b9d9fd273040100f70f5ef4c6715bdf2c6464b5ff9f2be66b53a2a34665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169672 Malicious code in ucok-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b239a07533e4ea401fa1b6021b8aebf441fc45901be06c529bb14b89483ec6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169768 Malicious code in uinsnu-lotipmi-kilar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30f7d6a707225d2d4cf16480756229989444b5523d9e538d2dc29f259ef969d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d5e785dda08a4ba5194392bf41be70b795c1a610bcb51ebb4f5e20c319b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163016 Malicious code in nokire-nakala61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9348e35e9a94221b74d83d94fb3b961dc0eb93eda78b9d308b7189dd4407ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-ini-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710073126339c59eb7484057356e51e3da9dc45a7611ec43e102dada5d735dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-envconfig-jest-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546ab6a959b803324db553cdd9de9cedab5e5868186484d81e3025537071f703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-hercules-prettier-stylelint-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de94077beec0f658f2376273e3937aaf74f02106107d2330e2ef39e87bfff2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-nuxtjs-mira-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-epimetheus-redis-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe3501ebf5ee0e9d66130ec7cdd596273f343020bfec46601162a249a5ae585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...