MAL-2025-154003 Malicious code in cara-bsunssns-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56d47883e30052be89fa5680ae70bf24f896c70745d772cd215e6e345c0409d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159651 Malicious code in manda-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0be47f2ad0184e26d571a9974c7968caf44637c3ba4a1b5814f4a5c36bb775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150943 Malicious code in @miptaa02/senba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7badf20708abf487ce49e3f553512ecf56c80a741a1f10c789b681c1548e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164319 Malicious code in pitra-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6711940bb04c5a04ea1cc783f410d9b5f32ee4d9b06e6a155858ef3a2b23fa9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156057 Malicious code in icha-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbf7df3d246291259bdfe77c178175b94f38c80eb270a6c04301eb66c00b20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiua-mobani-ayumanom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc388cb056bb52a1dc6e8889a3b92eaac059a80b79dcc591778790dadd1c4332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a8558e7cbbb5a4cc556d588267cb338f29c7e62611d0a74e22dd29301b4eb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23413a4066e6c5aff52381fd4d2bf77a4931915f5d7a6500af8ca4c0cb5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b8c600fabdb3eaf7fe5256f67362d284659799dc39dd3f32cefbbc5846723d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c46605673fc2e60e0b37fb85ff2c41297cb3fb47c46413f110ca53eae71f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusaaya-sdss-tdesfsrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce761364a74a39efcc8d6671f2716e204de6bf5781c3f79bec2b86c397d3156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d269b7aadfdd7f7875e58a3ea6583acd8232e1a4b5209c9ec3c086ad133f7976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinnagu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6e040f9ba04bde696e2243fda513007efa5f11e5465ec5b3b27499aa4afc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156423 Malicious code in inal-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e082e400b65c17985916d122c83b18de4a72164f839dcadd0272abc71bf164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168291 Malicious code in tealove-darknest34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd7d6659c550215f9737424287a7b53b6b6134c164a7b9f5b60316bf61fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158040 Malicious code in layla-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395d61c5693975779df44414092116715e65f9772751ffddc83074808b6d17f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153078 Malicious code in avminah-fagias-dafafigika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b85c2cbc702c3b424f198eb2378e137c2d1c9b8c947973124d0468ecdfa4d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151010 Malicious code in @miptaa02/weaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff0afce15f8d925e080df27a62a41d3ad03ce29931b042ab892ee64eb4fb7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168826 Malicious code in technical-ain-itaul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9443275c03b9d469fbafd3be71131ef940ebb6d9b77ba2d4873d2a04e7b39fbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...