MAL-2025-163089 Malicious code in nokire-namiresan37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b781c8aba928b3f1fafef55a68b651b3bb7dbdd3614a69380455c39a5fb90b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153440 Malicious code in avminh-afogffi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a5ff89755ce4c28f79db5fc6196aca8a3d1b0c27dc8e66097cbae819606d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155914 Malicious code in ican-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4503ac14cd9286066c4d82f22627968fdc20cad853b7c694e7e48ea0dd69e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150059 Malicious code in @mipta1/inila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bcf9708dcaab2020576b4667be0fb0a2c45d13fce12ac513a87f5a8cfd665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155616 Malicious code in hafiz-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e32acfd04b1b18ee1a069193a266533e00f5098f72c976b09779f0bdbba187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153315 Malicious code in avminh-afagias-ifafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752b47eca894e556a1df2273371e37749fad055d0c532be5f34935c39c86fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165019 Malicious code in rival-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3ba532825208c7ef0f1e23f3326372bb95316b01280582182a1d6a383a223b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156931 Malicious code in ita-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03d72b26ff1b3f023d3f4379d2bccdb8d27e8d8c22a0ae59e47e655b216e658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152390 Malicious code in alita-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfc6c8eeaf4d332608826a1199cee3ff931e56f716ff6afd42003521e4056e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166754 Malicious code in teaadgg-muni-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc345ffbef1cde3213d878a22bba3b33ec867110c882239a569e7d52a1d6bc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165584 Malicious code in saku-ai-ups0i (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3fa2ceda633e7c0ad8217f6d52049b5e08934078c1ad9c48cdefccd08c46b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156585 Malicious code in intan-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5a333b728d4905db0fd8585e4ffd7e5c776150f33ca8a629557c46aed78d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe-asimsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd64539174bb2d5f38a816bc6447eab2c2003ca005b0ccc3592cfda9f11760f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upilka-luzmu-kijnuhigijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab7eb8bfab350ae000c3626543825a39e45a1efd94a55f5f1a5b030229bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakiki44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f30e36fc36e2940da0a8388582ffb977886796e985a4017b003dd7097d9697a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a089e17b548333abb221fb188af9c3e8bf98aaa2c430ef9b22a683762e858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bc55a2ac15aad72b55eb66d0997679ad697cacf1735660951a678256f0009f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-vamikamulam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b98910a51505095ee1beec8bf13dc5db23c227c8de9e46319e77be24bf5fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9cc578b359cbc3d657f8934e29a1026a9207b5e5b6763fa88faad682d0c4cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...