MAL-2025-153566 Malicious code in avomainah-frauasu-ofau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a7ebf376fe447b8b39ca0db951561124a026e7b2213975a9da02dccc811a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7ddc454b0d50ecd1e3675f3851494f174e4c6ee098adb09f83e0c9d2de4473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cara-bsunsns-jsaunso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033c77edce4d09ec4229ea6c7ba6122326633be086c84eafe606813188136f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ac0c95ee10765baab3c5565d204c8918e7870aacb3ed8dac6f93bc26b50b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmas-adigfhagaiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f78c635381cc560fedeb943287f969a480b39dcd67c28187857dfe2e45decc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159168 Malicious code in makaimaigan-aniga-uag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7186d1dcf40ae9b3cc335a2258ce71dbdc428e78ab34239847fedd78da49da56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abyikula-nioybnali-lauykia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8bc386f9b02097a5cb9efb1ff42962421548df310bfc901ac1624872014e88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167137 Malicious code in teagood-manaki7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee5bcf9df6aa2781957e35443b47ff7240bd46db2df72ecf08f2ea77cbcaa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1696e30580f5d7c08c3dd40bbbc04e284a5c7d0d211a26cef9f0dcb6529fea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gobai-jgr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763b6adca64507dfd46c313b5072f7fcd26a20c08bb43e571f9b7dacaa7576ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1178e3c0f3bd7ce4923406927a1543ce4a692fcdf9534db2891f8fc4a5c5709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166864 Malicious code in teagood-cuekin94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd2228ab215ce256c0240c622ed5957aafc0dafccec808e0d7730bf2c29cdc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158107 Malicious code in lina-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51970b0eea68e34d3b18a4440f946903fdb7034bcdc8de12ea0c2bb2cb696396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uaragifa-at-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724e6ba8fda659b7391d4e6c87bdff0aac6854dec8a0174a3955e5e817047413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-nebula-sequelize-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0094de2b5d9b566517b29185064674e61f7198e886fd9ff5e9bedf51bd2d6f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146019 Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-cosmiconfig-nodejs-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dade96fb0e2431b0716ce1e1641fac7e05a2a2cad951c5e33772fc3cec2128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-commitizen-centauri-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23dc81767771f097119dec1907f0870dd56482d849c952663140da2b6f431dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-toml-iota-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c32721632d64f23304482bb6565212889262dac6c7be4198546fa527e9be39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...