MAL-2025-154278 Malicious code in demdadf-sadudar-addo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ad12d49efe53621169f2ae0c7b77f16645f48b001d900034d90be6511bc8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166338 Malicious code in sunden-dik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e8545149de8189bbe47820357501eaf5e0c33769b58a77a45dc94f3516bade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162290 Malicious code in nokire-akaza74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace68dd817557864a09feea7001e0f7db23a1bd5d888a3e221064eec55188b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bintang-tea29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375ce1c9f7112040b40543ddf890615f33604c03eec2e6f16cee07c85d9d9282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofogiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898ccb3c946abef07be65c17fdde3faaaaafbb05bddf1c9a12faff3ea88e2973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164447 Malicious code in polymedr-munsat-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542be0c1cb47bef341fa7a0a35b766b69f0c62075332dbf6fbadbb3e0d4b96a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150588 Malicious code in @miptaa02/erioo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54a47f69eeeaa7082edba6ec8ace847922e4690d58a384a33e9176f096e1c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154695 Malicious code in dioago-kamoi-aliuima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9cb41781b3ab9b6cef8a7ce06bd128a1c79a4d53a340d2f49c80b2f079f8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150880 Malicious code in @miptaa02/ofdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58721eaabb6907cf30d38997a654c86fd7652f808234560d748029d8332ee2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragia-mudifafa-sayugauf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5024220896ede674d7d82dd38f7c5149d6107d6aa9fbfc692f20f642e766e30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161391 Malicious code in nabuf-otgaf-doiafo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 350f7239dabc208664f3267bbc2ccbbb66fa9a7647e728252a0045603ea6b05a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161709 Malicious code in nabuf-otomin-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af3165b4396e4a4a00bc09733261cb32ef93c587ca9888679662aee1f2980b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150983 Malicious code in @miptaa02/ton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a854e906616d03a47cf52173406175addc9585c888a6b591480685bfbdcdc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akabia-aliguamafi-aguuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfedad960dd0a5be6f42c31ec2eb7df8162e8ddaa512145a25ec270bb4dccc9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160401 Malicious code in messi-vutsa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf889f317b63120f201d9531ca58d466e32736f2a63bf5c6c9902ad168e16d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152448 Malicious code in alvira-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04ce2fcb4cc8486dace9f2551edc9f4e443482b9315e119e9628b489621b6c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161358 Malicious code in nabuf-oguof-dusui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cbec3e9e363edf830cff77f8b0fe40340aa7e6d8c97884519f109ec0e80f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160653 Malicious code in modirai-igimao-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3591df27812ac86ec6b93eff91539d02df3211344e25032c0909a86415e28891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158719 Malicious code in lookingan-namala100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b4db7a0101d1e5c1075f467466371ad32dc73f1fdbc7854f1dc85215ffd559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161343 Malicious code in nabuf-ogof-dufoto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49267a76457f3881d97d4e0493a08782845904f921edbf7f34be9336acc30312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...